CVE-2014-8162

2015-05-1414:59:05

redhat

web.nvd.nist.gov

cve-2014-8162

xxe

rpc interface

spacewalk

rhn satellite 5.7

nvd

red hat network

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.007

Percentile

80.6%

JSON

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

Affected configurations

Nvd

Node

redhatnetwork_satelliteRange≤5.7

Node

susemanagerMatch1.7

VendorProductVersionCPE
redhatnetwork_satellite*cpe:2.3:a:redhat:network_satellite:*:*:*:*:*:*:*:*
susemanager1.7cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*