CVE-2022-22795CWE-611

Signiant - Manager+Agents XML External Entity (XXE)

Medium · published March 9, 2022

CVSS v3.1
6.8
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such as passwd, shadow, hosts and so on. By gaining access to these files, attackers can steal sensitive information from the victims machine.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01057 · 64.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2022-03-09T14:56Z
EPSS history
Timeline
  • 09 MAR 14:56Z
    Signiant - Manager+Agents XML External Entity (XXE)
    cvelistv5