CVE-2014-4669

LOW · 3.5 CVSS Gepubliceerd: 28-06-2014 CWE-200

Beschrijving

HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity (XXE) issue.

Vendors

Affected products

Enterprise Maps

References

packetstormsecurity.com
seclists.org
www.securityfocus.com