PT-2014-8959
CVE-2014-9360
·
تاريخ النشر
2014-12-10
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Scalix Web Access versions 11.4.6.12377 through 12.2.0.14697
Description
The issue allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request. This is due to an XML external entity (XXE) vulnerability.
Recommendations
For versions 11.4.6.12377 through 12.2.0.14697, consider disabling the XML parsing functionality until a patch is available. Restrict access to sensitive files and intranet servers to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾