7.1
Élevée
CVE-2020-14478 A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files…
Description
A local, authenticated attacker could use an XML External Entity (XXE) attack to exploit weakly configured XML files to access local or remote content. A successful exploit could potentially cause a denial-of-service condition and allow the attacker to arbitrarily read any local file via system-level services.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FactoryTalk Services Platform 6.11 | premières → 6.11.00 | Pas de correctif indiqué |