PT-2018-12348
CVE-2018-1421
·
تاريخ النشر
2018-04-04
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسA:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N
Name of the Vulnerable Software and Affected Versions
IBM WebSphere DataPower Appliances versions 7.1 through 7.6
Description
The issue allows for a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory resources.
Recommendations
For versions 7.1 through 7.6, update to a version that includes the fix for this issue to prevent XXE attacks. As a temporary workaround, consider restricting XML data processing to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾