BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do DoS attacks with XML expansion attacks. XXE with direct response and XXE OOB are allowed.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/155552/BMC-Smart-Reporting-7.3-20180418-XML-Injection.html | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2019/Dec/7 | Exploit Mailing List Third Party Advisory |
| https://docs.bmc.com/docs/itsm90/export-and-import-repository-509983929.html | Product |
| http://packetstormsecurity.com/files/155552/BMC-Smart-Reporting-7.3-20180418-XML-Injection.html | Exploit Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2019/Dec/7 | Exploit Mailing List Third Party Advisory |
| https://docs.bmc.com/docs/itsm90/export-and-import-repository-509983929.html | Product |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/155552/BMC-Smart-Reporting-7.3-20180418-XML-Injection.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () http://seclists.org/fulldisclosure/2019/Dec/7 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://docs.bmc.com/docs/itsm90/export-and-import-repository-509983929.html - Product |
Information
Published : 2019-12-04 20:15
Updated : 2024-11-21 04:20
NVD link : CVE-2019-11216
Mitre link : CVE-2019-11216
CVE.ORG link : CVE-2019-11216
JSON object : View
Products Affected
bmc
- remedy_smart_reporting