Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 contain a XML External Entity (XXE) Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to read certain system files in the server or cause denial of service by supplying specially crafted Document Type Definitions (DTDs) in an XML request.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2018/Aug/5 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/105130 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1041417 | Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: dell
Published: 2018-08-03T00:00:00
Updated: 2018-08-24T09:57:01
Reserved: 2018-05-14T00:00:00
Link: CVE-2018-11048
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-08-10T20:29:00.243
Modified: 2020-12-08T17:08:46.950
Link: CVE-2018-11048
JSON object: View
Redhat Information
No data.
CWE