Vulnerability in EMC Atmos
CVE-2015-4538
The XML parser in EMC Atmos before 2.2.3.426 and 2.3.x before 2.3.1.0 allows remote authenticated users to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
EPSS: 0.027 (84.5th percentile) — read the EPSS interpretation.
Affected products
- Emc Atmos — versions 2.2.3, 2.3.0
- N/a — versions n/a
References
- security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (x_refsource_MISC)