XML Entity Expansion Vulnerability in Symantec Management Console

CVE-2017-6323

What is CVE-2017-6323?

The Symantec Management Console prior to specific updates suffers from a vulnerability involving the processing of XML input with external entity references. An improperly configured XML parser can lead to various issues such as disclosure of sensitive data, potential denial of service, server side request forgery, and unauthorized port scanning from the parser's host. These risks can significantly impact system security and data integrity.

References