IBM WebSphere Cast Iron Solution CVE-2016-9691 XML External Entity Denial of Service Vulnerability

Bugtraq ID:	98338
Class:	Input Validation Error
CVE:	CVE-2016-9691
Remote:	Yes
Local:	No
Published:	May 01 2017 12:00AM
Updated:	May 23 2017 04:23PM
Credit:	Jarad Kopf from Deltek.
Vulnerable:	IBM WebSphere Cast Iron Solution 7.0 IBM WebSphere Cast Iron Solution 7.5.1.0 IBM WebSphere Cast Iron Solution 7.5.0.1 IBM WebSphere Cast Iron Solution 7.5.0.0 IBM WebSphere Cast Iron Solution 7.0.0.2 IBM WebSphere Cast Iron Solution 7.0.0.1
Not Vulnerable:

IBM WebSphere Cast Iron Solution CVE-2016-9691 XML External Entity Denial of Service Vulnerability

IBM WebSphere Cast Iron Solution is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to obtain sensitive information or consume memory resources and cause a denial-of-service condition.

WebSphere Cast Iron Solution 7.5.1.0, 7.5.0.1, 7.5.0.0, 7.0.0.2, 7.0.0.1, and 7.0.0 are vulnerable.

IBM WebSphere Cast Iron Solution CVE-2016-9691 XML External Entity Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Cast Iron Solution CVE-2016-9691 XML External Entity Denial of Service Vulnerability

References:

• IBM Homepage (IBM)
  
• swg21998014: IBM WebSphere Cast Iron Solution is affected by XML External Entity (IBM)