Security Bulletin: XML External Entity (XXE) security vulnerability in InfoSphere Guardium (CVE-2012-3339)

Abstract XML External Entity XXE security vulnerability in InfoSphere Guardium allows remote authenticated users to obtain sensitive information via unspecified vectors. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3339 DESCRIPTION: User can get to an error report containing content of a file ...

CVE-2012-3339

CVE-2012-3339 is an XML External Entity (XXE) vulnerability in IBM InfoSphere Guardium. The issue allows remote authenticated users to obtain sensitive information, specifically via an error report that can reveal server file contents (including a database password). Affected platforms include IB...