XML External Entity Vulnerability in Cisco's Security Monitoring, Analysis, and Response System
CVE-2013-1140

Currently unrated

Key Information:

Vendor

Cisco
Status
Security Monitoring Analysis And Response System
Vendor
CVE Published:
6 March 2013

What is CVE-2013-1140?

The XML parser in Cisco's Security Monitoring, Analysis, and Response System (MARS) has a vulnerability that allows remote attackers to exploit XML External Entity (XXE) configurations. By using an external entity declaration alongside an entity reference, attackers can read arbitrary files from the system, potentially leading to sensitive information disclosure. This issue has been identified and tracked as Bug ID CSCue55093.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.