GE MDS PulseNET XmlAdapterServlet XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of GE MDS PulseNET. Authentication is not required to exploit this vulnerability. The specific flaw exists within the XmlAdapterServlet servlet. Due to the improper restriction of XML External...

PT-2018-10003

Name of the Vulnerable Software and Affected Versions GE MDS PulseNET versions 3.2.1 and prior GE MDS PulseNET Enterprise versions 3.2.1 and prior Description The issue allows for XML External Entity XXE attacks, which can be used to exfiltrate data from the host Windows platform. This is related...