CVE-2015-2346

Name of the Vulnerable Software and Affected Versions Huawei SEQ Analyst versions prior to V200R002C03LG0001CP0022

Description The issue allows remote authenticated users to read arbitrary files. This is achieved via the req parameter, which is vulnerable to XML external entity (XXE) attacks.

Recommendations For versions prior to V200R002C03LG0001CP0022, update to V200R002C03LG0001CP0022 or later to resolve the issue. As a temporary workaround, consider restricting access to the req parameter to minimize the risk of exploitation.