CVE-2015-3269

Related Files

HP Security Bulletin HPSBGN03550 2

Posted Mar 4, 2016

Authored by HP | Site hp.com

HP Security Bulletin HPSBGN03550 2 - A security vulnerability in Apache Flex BlazeDS was addressed by HP Operations Manager i (OMi) and Business Service Manager (BSM). The vulnerability could be exploited remotely resulting in disclosure of information. Note : OMi v10.10 is NOT affected by this vulnerability. Revision 2 of this advisory.

tags | advisory

advisories | CVE-2015-3269

SHA-256 | 27a92a5d40551b9d1b66e19a06398f5aaeda2de982126868c4b21cbd744ed72a

Download | Favorite | View

VMware Security Advisory 2015-0008

Posted Nov 19, 2015

Authored by VMware | Site vmware.com

VMware Security Advisory 2015-0008 - VMware product updates address information disclosure issue.

tags | advisory, info disclosure

advisories | CVE-2015-3269

SHA-256 | 1c1a650290da77afa5cfb03bf88b3028205f532ac7c23a35fb455c034ad606fa

Download | Favorite | View

Apache Flex BlazeDS 4.7.0 XML Entity Expansion

Posted Aug 22, 2015

Authored by Matthias Kaiser

When receiving XML encoded AMF messages containing DTD entities, the default XML parser configurations allows expanding of entities to local resources. A request that included a specially crafted request parameter could be used to access content that would otherwise be protected.

tags | advisory, local

advisories | CVE-2015-3269

SHA-256 | 69d5afa3639558f66a8f98807a33cbb05547e69350539f5291a75ad6c03267b4

Download | Favorite | View