Security Bulletin: An XML External Entity (XXE) processing vulnerability is exposed in Case Manager administration client (CVE-2018-1844)

Summary IBM Case Manager has addressed the following vulnerability. An XML External Entity XXE processing vulnerability is exposed in Case Manager administration client with the ability to import solution packaged which are FileNet Deployment Manager exported zip packages. CVE-2018-1844...

Security Bulletin: IBM FileNet Content Manager component FileNet Deployment Manager security vulnerability

Summary FileNet Deployment Manager external DTD security vulnerability. Vulnerability Details CVEID: CVE-2018-1844 DESCRIPTION: IBM Case Manager is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose...

CVE-2018-1844

CVE-2018-1844 affects IBM FileNet Content Manager 5.2.1 and 5.5.0. The vulnerability is a XML External Entity (XXE) injection when processing XML, enabling a remote attacker to reveal sensitive information or exhaust memory/resources. IBM Case Manager-related pages document the same issue and lis...