PT-2017-16867 · Eparakstitajs · Eparakstitajs+1

Oskars Veģeris · Publicado 2017-02-17 · Atualizado 2017-03-16 · CVE-2017-6055

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eParakstitajs versions prior to 1.3.9 eParaksts Java lib versions prior to 2.5.13

Description The issue allows remote attackers to read arbitrary files or possibly have unspecified other impact via a crafted edoc file. This is due to an XML external entity (XXE) vulnerability.

Recommendations For eParakstitajs versions prior to 1.3.9, update to version 1.3.9 or later. For eParaksts Java lib versions prior to 2.5.13, update to version 2.5.13 or later.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2017-6055

Produtos afetados

Eparakstitajs

Eparaksts Java Lib

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-6055 · Nota de Segurança
• https://cert.lv/lv/2017/02/iznakusas-nedelas-zinas-par-drosibas-incidentiem-nr-4-2017 · Nota
• https://osv.dev/vulnerability/CVE-2017-6055 · Aviso do Fabricante
• https://eparaksts.lv/en/Assistance/downloads/eparakstitajs-3-0/previous-versions-of-eparakstitajs-3-0 · Aviso do Fabricante