Apache Flex BlazeDS Insecure Xml Entity Expansion Vulnerability
| Reporter | Title | Published | Views | Family All 28 |
|---|---|---|---|---|
 | APSB15-20 Security update available for LiveCycle Data Services | 18 Aug 201500:00 | – | adobe |
 | Apache Flex BlazeDS File Disclosure Network Scanning | 10 Jun 202000:00 | – | bdu_fstec |
 | CVE-2015-3269 | 2 Aug 202614:43 | – | circl |
 | Adobe LiveCycle Data Services Information Disclosure Vulnerability | 20 Aug 201500:00 | – | cnvd |
| Granite Data Services AMF Framework XML External Entity Reference Vulnerability | 25 Mar 201600:00 | – | cnvd |
 | Adobe ColdFusion BlazeDS XXE (APSB15-21) (credentialed check) | 3 Sep 201500:00 | – | nessus |
| HP Operations Manager i Apache Flex BlazeDS External Entity Injection Vulnerability | 9 Mar 201600:00 | – | nessus |
| VMware Horizon View Multiple Vulnerabilities (VMSA-2015-0003) (VMSA-2015-0008) (POODLE) | 13 Apr 201500:00 | – | nessus |
| VMware vCenter Multiple Vulnerabilities (VMSA-2015-0008) | 22 Dec 201500:00 | – | nessus |
 | CVE-2015-3269 | 25 Aug 201501:00 | – | cve |
10
CVE-2015-3269 Apache Flex BlazeDS Insecure Xml Entity Expansion Vulnerability
Severity: Important
Vendor: The Apache Software Foundation
Versions Affected: Apache Flex BlazeDS 4.7.0
Description: When receiving XML encoded AMF messages containing DTD entities, the default XML parser configurations allows expanding of entities to local resources. A request that included a specially crafted request parameter could be used to
access content that would otherwise be protected.
Mitigation: All users of Apache Flex BlazeDS prior to 4.7.1
Example: For an AMF message that contains the following xml payload:
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE foo [
<!ELEMENT foo ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo>
the entity &xxe; would be expanded to the content of the file /etc/passwd.
However this expanded information is not automatically transferred back to
the client, but could be made available by the application.
Credit: This issue was discovered by Matthias Kaiser of Code White
References: https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing
Christofer Dutz
# 0day.today [2018-04-02] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Aug 2015 00:00Current
6.4Medium risk
Vulners AI Score6.4
EPSS0.09841