Vulnerability in Apache PDFBox Affects IBM Control Center (CVE-2019-0228)
CVEID:CVE-2019-0228
**DESCRIPTION:**Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.
CVSS Base score: 5.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/160868 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Affected Product | Version |
---|---|
IBM Control Center | 6.1.0.0 through 6.1.2.1 iFix01 |
Product|VRMF|iFix|
Remediation
—|—|—|—
IBM Control Center| 6.1.2.1| iFix02|
None