IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to XML external entity injection, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 78291.
The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Infosphere_guardium | Ibm | 8.0 (including) | 8.0 (including) |
| Infosphere_guardium | Ibm | 8.0.1 (including) | 8.0.1 (including) |
| Infosphere_guardium | Ibm | 8.2 (including) | 8.2 (including) |