CVE-2018-16166

CVE-2018-16166 affects LogonTracer ≤ 1.2.0 through a XML External Entity (XXE) injection. The vulnerability could allow an attacker to obtain arbitrary files on the server where LogonTracer runs, via unspecified vectors. Public detailing in connected sources confirms the XXE issue and the impact;...