Description (CNA)
An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Micro Focus / Fortify Software Security Center | affected 17.1, 17.2, 18.1 |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1041286
- https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563
- https://www.exploit-db.com/exploits/45027/
ADP enrichment
No English description supplied.