CVE-2014-8162

CWE-611 — XML External Entity (XXE)5 documents5 sources
Severity
7.5HIGH
EPSS
0.6%
top 30.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Network SatelliteSuse Manager
Timeline
PublishedMay 14
Latest updateMay 17

Description

XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary files and possibly have other unspecified impact via unknown vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDsuse/manager1.7

🔴Vulnerability Details

2
GHSA
GHSA-r4x8-hgr8-2fhj: XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5↗2022-05-17
▶
CVEList
CVE-2014-8162: XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5↗2015-05-14
▶

📋Vendor Advisories

1
Red Hat
Satellite5: RPC API XML External Entities file disclosure↗2015-05-11
▶

💬Community

1
Bugzilla
CVE-2014-8162 Satellite5: RPC API XML External Entities file disclosure↗2015-01-29
▶