CVE-2013-1140 in Cisco Security Monitoring Analysis
Summary
The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCue55093.
Reservation
01/11/2013
Disclosure
03/06/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7905 | Cisco Security Monitoring Analysis/Response System XML Parser information disclosure | 200 | Not defined | Official fix | CVE-2013-1140 |