Advantech WISE-PaaS/RMM WechatSignin wechattokenlogin XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WISE-PasS/RMM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WechatSignin class. Due to the improper restriction of XML External...

PT-2019-15289

Name of the Vulnerable Software and Affected Versions Advantech WISE-PaaS/RMM versions 3.3.29 and prior Description The issue concerns XML External Entity XXE vulnerabilities that may allow the disclosure of sensitive data. Multiple components within Advantech WISE-PaaS/RMM are affected, includin...