CVE-2017-6323

Sažetak

The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts.

Reference

http://www.securityfocus.com/bid/98621
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170628_00

CVSS

Base:	5.2
Impact:	6.4
Exploitability:	5.1

Pristup

Vektor	Složenost	Autentikacija
ADJACENT_NETWORK	LOW	SINGLE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:A/AC:L/Au:S/C:P/I:P/A:P

Zadnje važnije ažuriranje

23-05-2018 - 14:38

Objavljeno

16-04-2018 - 19:29