Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2014-5392

Published: Sep 23, 2014 | Modified: Oct 09, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-5392
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML external entity declaration in conjunction with an entity reference.

Affected Software

Name Vendor Start Version End Version
Jobscheduler Sos * 1.6.4131 (including)
Jobscheduler Sos 1.6.4014 (including) 1.6.4014 (including)
Jobscheduler Sos 1.6.4043 (including) 1.6.4043 (including)
Jobscheduler Sos 1.7.4177 (including) 1.7.4177 (including)
Jobscheduler Sos 1.7.4189 (including) 1.7.4189 (including)

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use