Symantec Management Console CVE-2017-6323 Multiple XML External Entity Injection Vulnerabilities

Bugtraq ID:	98621
Class:	Input Validation Error
CVE:	CVE-2017-6323
Remote:	Yes
Local:	No
Published:	Jun 28 2017 12:00AM
Updated:	Jun 28 2017 12:00AM
Credit:	Korprit Zombie
Vulnerable:	Symantec Management Console 0
Not Vulnerable:	Symantec Management Console ITMS 8.1 RU1 Symantec Management Console ITMS 8.0_POST_HF6 Symantec Management Console ITMS 7.6_POST_HF7

Symantec Management Console CVE-2017-6323 Multiple XML External Entity Injection Vulnerabilities

Symantec Management Console is prone to multiple XML External Entity injection vulnerabilities.

Attackers can exploit these issues to obtain potentially sensitive information or cause denial-of-service conditions. This may lead to further attacks.

Symantec Management Console CVE-2017-6323 Multiple XML External Entity Injection Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Management Console CVE-2017-6323 Multiple XML External Entity Injection Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec Management Console CVE-2017-6323 Multiple XML External Entity Injection Vulnerabilities

References:

• Symantec Home Page (Symantec)
  
• Security Advisories Relating to Symantec Products - Symantec Management Console (Symantec)