XML External Entity Vulnerability in IBM License Metric Tool and Tivoli Asset Discovery
CVE-2014-8924

Currently unrated

Key Information:

Vendor
IBM
Status
License Metric Tool
Vendor
CVE Published:
20 May 2015

Summary

The vulnerability in IBM License Metric Tool and Tivoli Asset Discovery arises from improper handling of XML input. Attackers can exploit this weakness to craft XML data that includes an external entity declaration, enabling them to read sensitive files from the server or send TCP requests to other intranet servers. This exposure poses significant risk as it allows unauthorized access to internal resources, making it crucial for users to apply the latest patches or updates to mitigate potential threats.

References

http://www.securitytracker.com/id/1032275
vdb-entryx_refsource_SECTRACK
http://www-01.ibm.com/support/docview.wss?uid=swg21882820
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.