CVE-2015-4538

EMC Atmos < 2.2.3.426 and 2.3.x < 2.3.1.0 - Authenticated XML External Entity Injection

Title source: llm
STIX 2.1

Description

The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033456
Mailing List mailing-list x_refsource_bugtraq
http://seclists.org/bugtraq/2015/Sep/7

Scores

EPSS 0.0074
EPSS Percentile 73.1%

Details

Status published
Products (2)
emc/atmos 2.2.3
emc/atmos 2.3.0
Published Sep 04, 2015
Tracked Since Feb 18, 2026