CVE

Id
79110  
CVE No.
CVE-2015-1833  
Status
Candidate  
Description
XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.x before 2.8.1, and 2.10.x before 2.10.1 allows remote attackers to read arbitrary files and send requests to intranet servers via a crafted WebDAV request.  
Phase
Assigned (20150217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
720638 79110 CVE-2015-1833 BUGTRAQ:20150521 CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)  View
720639 79110 CVE-2015-1833 URL:http://www.securityfocus.com/archive/1/archive/1/535582/100/0/threaded  View
720640 79110 CVE-2015-1833 EXPLOIT-DB:37110  View
720641 79110 CVE-2015-1833 URL:https://www.exploit-db.com/exploits/37110/  View
720642 79110 CVE-2015-1833 MLIST:[jackrabbit-announce] 20150521 CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)  View
720643 79110 CVE-2015-1833 URL:http://mail-archives.apache.org/mod_mbox/jackrabbit-announce/201505.mbox/%3C555DA644.8080908%40greenbytes.de%3E  View
720644 79110 CVE-2015-1833 MISC:http://packetstormsecurity.com/files/132005/Jackrabbit-WebDAV-XXE-Injection.html  View
720645 79110 CVE-2015-1833 CONFIRM:http://www.apache.org/dist/jackrabbit/2.10.1/RELEASE-NOTES.txt  View
720646 79110 CVE-2015-1833 CONFIRM:https://issues.apache.org/jira/browse/JCR-3883  View
720647 79110 CVE-2015-1833 DEBIAN:DSA-3298  View
720648 79110 CVE-2015-1833 URL:http://www.debian.org/security/2015/dsa-3298  View
720649 79110 CVE-2015-1833 BID:74761  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7181 JVNDB-2015-002501 IBM WebSphere Application Server の WebSphereOauth20SP.ear における権限を取得される脆弱性 IBM WebSphere Application Server (WAS) の WebSphereOauth20SP.ear は、OAuth のグラントタイプがパスワードの送信を必要とする場合、権限を取得される脆弱性が存在します。 CVE-2015-1885 79110 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002501.html  View