CVE-2014-0644

EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity…

published April 17, 2014

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, as demonstrated by reading the /etc/shadow file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53342 · 99.0th percentile
Published
2014-04-17T01:00Z
EPSS history
Timeline
  • 17 APR 01:00Z
    EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity…
    cvelistv5