IBM FileNet Business Process Framework XML Entity Parsing Information Disclosure Vulnerability
BID:64417
Info
IBM FileNet Business Process Framework XML Entity Parsing Information Disclosure Vulnerability
| Bugtraq ID: | 64417 |
| Class: | Design Error |
| CVE: |
CVE-2013-5452 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 19 2013 12:00AM |
| Updated: | Jul 05 2016 09:34PM |
| Credit: | IBM |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IBM FileNet Business Process Framework XML Entity Parsing Information Disclosure Vulnerability
IBM FileNet Business Process Framework is prone to an information-disclosure vulnerability due to an error when parsing XML external entities.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
IBM FileNet Business Process Framework 4.1.0 is vulnerable; other versions may also be affected.
IBM FileNet Business Process Framework is prone to an information-disclosure vulnerability due to an error when parsing XML external entities.
An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks.
IBM FileNet Business Process Framework 4.1.0 is vulnerable; other versions may also be affected.