Yüksek CVSS 7.5
CVE-2016-3674: Jboss Middleware: hassas bilgi ifşası
Açıklama (NVD)
Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.
Özet bilgiler
- Ürün
- Redhat Jboss Middleware
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %8,18 (yüzdelik 95)
- CWE
- CWE-200
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-jboss-middleware | 1 | 1 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| fedoraproject-fedora | 22 | 22 | — |
| fedoraproject-fedora | 23 | 23 | — |
| xstream-xstream | — | — | 1.4.9 |
Kaynaklar
- NVD kaydı
- lists.fedoraproject.org
- lists.fedoraproject.org
- rhn.redhat.com
- rhn.redhat.com
- www.debian.org
- www.openwall.com
- www.openwall.com
- www.securityfocus.com
- www.securitytracker.com
- x-stream.github.io
- github.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- rhn.redhat.com
- rhn.redhat.com
- www.debian.org
- www.openwall.com
- www.openwall.com
- www.securityfocus.com
- www.securitytracker.com
- x-stream.github.io
- github.com
- CWE-200