CVE-2014-0171
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD
Description
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.
Affected (2)
Products: Redhat: Jboss Data Virtualization · Odata4j Project: Odata4j
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 6.0.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
References (4)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.