XML External Entity Injection (XXE) Vulnerability in IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5

XML External Entity Injection (XXE) Vulnerability in IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5

CVE-2018-1456 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:P

IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091.

Learn more about our External Network Penetration Testing.