CVE-2014-8162

Related Files

Red Hat Security Advisory 2015-0957-01

Posted May 11, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-0957-01 - Red Hat Satellite is a system management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote management of multiple Linux deployments with a single, centralized tool. It was found that the RPC interface in Satellite would resolve external entities, allowing an attacker to conduct XML External Entity attacks. A remote attacker could use this flaw to read files accessible to the user running the Satellite server, and potentially perform other more advanced XXE attacks.

tags | advisory, remote, xxe

systems | linux, redhat

advisories | CVE-2014-8162

SHA-256 | 6bf5094519afad4e95c2db139971651deba0b71c07ab01281232000eaa5331d1

Download | Favorite | View