Description (CNA)
IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM Corporation / Access Manager | affected 9.0; affected 9.0.0.1; affected 9.0.1; affected 7.0.0; affected 8.0.0; affected 8.0.0.1; affected 8.0.0.2; affected 8.0.0.3; affected 8.0.0.4; affected 8.0.0.5; affected 8.0.1; affected 8.0.1.2; affected 8.0.1.3; affected 8.0.1.4; affected 9.0.0; affected 9.0.1.0 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/95295
- http://www.ibm.com/support/docview.wss?uid=swg21995531
- http://www.securitytracker.com/id/1038506
ADP enrichment
No English description supplied.