CVE-2014-0170 Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity (XXE) issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat jboss data virtualization | <= 6.0.0 | No fix listed |
| jboss teiid | <= 8.6 | No fix listed |
| jboss teiid | = 8.4 | No fix listed |
References
- RHSA-2014:1284 vendor-advisory
- 61530 third-party-advisory
- 1030886 vdb-entry
- jboss-data-cve20140170-info-disc(96192) vdb-entry
- issues.jboss.org patch vendor-advisory