Beveiligingsadvies

CVE-2018-14473

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-08-03 16:00:00
Laatst bijgewerkt 2024-08-05 09:29:51
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacker sending a crafted HTTP request in order to exfiltrate information or cause a Denial of Service.