Security Bulletin: XML External Entity (XXE) security vulnerability in InfoSphere Guardium (CVE-2012-3340)

Abstract XML External Entity XXE security vulnerability in InfoSphere Guardium allows remote authenticated users to obtain sensitive information via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3340 DESCRIPTION: User can get to an error report containing content of a file ...

CVE-2012-3340

creationtimestamp| type| source ---|---|--- 2020-09-01 20:55:32+00:00| seen| https://t.me/cibsecurity/14415...

CVE-2012-3340

IBM InfoSphere Guardium (versions 8.0, 8.01, 8.2) is affected by an XML External Entity (XXE) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker could disclose sensitive information (e.g., contents of server files such as database passwords). Root ...