XML Parser Weakness in 4D Server Exposes Sensitive Data

CVE-2024-39847

What is CVE-2024-39847?

An identified vulnerability in the XML parser of the SOAP endpoints within 4D Server allows unauthenticated attackers to gain unauthorized read access to files on the application server. This also extends to adjacent network shares, enabling potential attackers to perform HTTP GET requests to arbitrary services. Organizations utilizing 4D Server should assess their exposure to this vulnerability and apply necessary mitigations.

References