CVE-2014-0171 in JBoss Data Virtualization

Resumen (Inglés)

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2013-12-03

Divulgación

2015-01-15

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
73641	Red Hat JBoss Data Virtualization XML External Entity	611	No está definido	Arreglo oficial	CVE-2014-0171

Fuentes

• MITRE
• NVD
• CVE Details