CVE-2018-20687

An XXE vulnerability exists in Raritan CommandCenter Secure Gateway (CC-SG) before version 8.0.0, in CommandCenterWebServices/.*?wsdl. The flaw allows remote unauthenticated attackers to read arbitrary files or perform server-side request forgery (SSRF) via a crafted DTD in an XML request. Exploi...

Raritan CommandCenter Secure Gateway XML External Entity Injection Vulnerability

Raritan CommandCenter Secure Gateway CC-SG is a data center server management solution from Raritan. The product provides remote control, centralized authentication, authorization and logging. A code issue vulnerability exists in Raritan versions prior to 8.0.0. The vulnerability stems from an...

CVE-2018-20687: Improper Restriction of XML External Entity Reference

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

PT-2019-10164

Name of the Vulnerable Software and Affected Versions: Raritan CommandCenter Secure Gateway versions prior to 8.0.0 Description: The issue allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks. This is achieved by sending a crafted DTD in ...

Raritan CommandCenter Secure Gateway Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Vulnerability on Raritan CommandCenter Secure Gateway II. CVE REFERENCE ------------------------- - III. VENDOR ------------------------- https://www.raritan.com/support/product/commandcenter-secure-gateway IV. TIMELINE -------------------------...