CVE-2018-1000632

Published: Aug 20, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

Affected (32)

Products: Dom4j Project: Dom4j · Debian: Debian Linux · Oracle: Flexcube Investor Servicing, Primavera P6 Enterprise Project Portfolio Management, Rapid Planning, Retail Integration Bus, Utilities Framework · +2 more

Show all products

Dom4j Project: Dom4j · Debian: Debian Linux · Oracle: Flexcube Investor Servicing, Primavera P6 Enterprise Project Portfolio Management, Rapid Planning, Retail Integration Bus, Utilities Framework · Redhat: Satellite, Satellite Capsule, Jboss Enterprise Application Platform · Netapp: Oncommand Workflow Automation, Snap Creator Framework, Snapcenter, Snapmanager

1 product

1 product

5 products

Flexcube Investor Servicing

Primavera P6 Enterprise Project Portfolio Management

Rapid Planning

Retail Integration Bus

3 products

Jboss Enterprise Application Platform

Netapp

4 products

Oncommand Workflow Automation

Snap Creator Framework

Snapcenter

Snapmanager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dom4j Project Dom4j	From 2.0.0 to 2.0.3
Dom4j Project Dom4j	From 2.1.0 to 2.1.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration C

19 vulnerable

Vulnerable Software	Affected Versions
Oracle Flexcube Investor Servicing	Version 12.0.4
Oracle Flexcube Investor Servicing	Version 12.1.0
Oracle Flexcube Investor Servicing	Version 12.3.0
Oracle Flexcube Investor Servicing	Version 12.4.0
Oracle Flexcube Investor Servicing	Version 14.0.0
Oracle Primavera P6 Enterprise Project Portfolio Management	From 16.1.0.0 to 16.2.20.1
Oracle Primavera P6 Enterprise Project Portfolio Management	From 17.1.0.0 to 17.12.17.1
Oracle Primavera P6 Enterprise Project Portfolio Management	From 18.1.0.0 to 18.8.19.0
Oracle Primavera P6 Enterprise Project Portfolio Management	From 19.12.0.0 to 19.12.6.0
Oracle Rapid Planning	Version 12.1
Oracle Rapid Planning	Version 12.2
Oracle Retail Integration Bus	Version 15.0
Oracle Retail Integration Bus	Version 16.0
Oracle Utilities Framework	From 4.3.0.2.0 to 4.3.0.6.0
Oracle Utilities Framework	Version 2.2.0
Oracle Utilities Framework	Version 4.2.0.2.0
Oracle Utilities Framework	Version 4.2.0.3.0
Oracle Utilities Framework	Version 4.4.0.0.0
Oracle Utilities Framework	Version 4.4.0.2

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Satellite	Version 6.6
Redhat Satellite Capsule	Version 6.6

Configuration E

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 7.1.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 6.0.0
Redhat Jboss Enterprise Application Platform	Version 6.4.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 5.0

Configuration G

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand Workflow Automation	All versions
Netapp Snap Creator Framework	All versions
Netapp Snapcenter	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions

Related CWEs

CWE-91

XML Injection (aka Blind XPath Injection)

The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.

References (58)

https://access.redhat.com/errata/RHSA-2019:0362

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0364

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0365

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0380

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1159

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1160

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1161

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1162

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3172

Source: cve@mitre.org

Third Party Advisory

https://github.com/dom4j/dom4j/commit/e598eb43d418744c4dbf62f647dd2381c9ce9387

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/dom4j/dom4j/issues/48

Source: cve@mitre.org

Third Party Advisory

https://ihacktoprotect.com/post/dom4j-xml-injection/

Source: cve@mitre.org

ExploitThird Party Advisory

https://lists.apache.org/thread.html/00571f362a7a2470fba50a31282c65637c40d2e21ebe6ee535a4ed74%40%3Ccommits.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/4a77652531d62299a30815cf5f233af183425db8e3c9a824a814e768%40%3Cdev.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/5a020ecaa3c701f408f612f7ba2ee37a021644c4a39da2079ed3ddbc%40%3Ccommits.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/7e9e78f0e4288fac6591992836d2a80d4df19161e54bd71ab4b8e458%40%3Cdev.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/7f6e120e6ed473f4e00dde4c398fc6698eb383bd7857d20513e989ce%40%3Cdev.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/9d4c1af6f702c3d6d6f229de57112ddccac8ce44446a01b7937ab9e0%40%3Ccommits.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/d7d960b2778e35ec9b4d40c8efd468c7ce7163bcf6489b633491c89f%40%3Cdev.maven.apache.org%3E

Source: cve@mitre.org

https://lists.apache.org/thread.html/rb1b990d7920ae0d50da5109b73b92bab736d46c9788dd4b135cb1a51%40%3Cnotifications.freemarker.apache.org%3E

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2018/09/msg00028.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IOOVVCRQE6ATFD2JM2EMDXOQXTRIVZGP/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJULAHVR3I5SX7OSMXAG75IMNSAYOXGA/

Source: cve@mitre.org

https://security.netapp.com/advisory/ntap-20190530-0001/

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: cve@mitre.org

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Source: cve@mitre.org

PatchThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:0362