Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-0644
HistoryApr 17, 2014 - 1:55 a.m.

Xxe

2014-04-1701:55:00
PRIOn knowledge base
www.prio-n.com
2

7.2 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.364 Low

EPSS

Percentile

97.0%

JSON

EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.

Related

nessus 1
openvas 1
cve 1
cvelist 1
securityvulns 2
nessus
nessus
EMC Cloud Tiering Appliance XML External Entity (XXE) Arbitrary File Disclosure
2014-04-07 00:00:00
openvas
openvas
EMC Cloud Tiering Appliance v10.0 Unauthenticated XXE Arbitrary File Read Vulnerability - Active Check
2014-04-01 00:00:00
cve
cve
CVE-2014-0644
2014-04-17 01:55:00
cvelist
cvelist
CVE-2014-0644
2014-04-17 01:00:00
securityvulns
securityvulns
EMC Cloud Tiering Appliance information leakage
2014-05-04 00:00:00
ESA-2014-028: EMC Cloud Tiering Appliance XML External Entity (XXE) and Information Disclosure Vulnerabilities
2014-05-04 00:00:00

7.2 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.364 Low

EPSS

Percentile

97.0%

JSON
Related for PRION:CVE-2014-0644
nessus1openvas1cve1cvelist1securityvulns2