PT-2018-11072
CVE-2018-12243
·
تاريخ النشر
2018-09-19
·
تاريخ التحديث
2018-12-08
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Symantec Messaging Gateway versions prior to 10.6.6
Description
The issue is related to a XML external entity (XXE) exploit. This type of issue occurs when XML input containing a reference to an external entity is processed by a weakly configured XML parser, allowing access to files that should not normally be accessible through file URI schemes or relative paths in the system identifier.
Recommendations
For versions prior to 10.6.6, update to version 10.6.6 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾