CVE-2014-3066

Description

IBM Tivoli Endpoint Manager 9.1 before 9.1.1088.0 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/93630

http://www.securitytracker.com/id/1030508

http://www-01.ibm.com/support/docview.wss?uid=swg21673967

http://www-01.ibm.com/support/docview.wss?uid=swg21673961

http://secunia.com/advisories/58906

http://secunia.com/advisories/58672

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3