IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Traveler | Ibm | 8.5.3 (including) | 8.5.3 (including) |
| Traveler | Ibm | 9.0 (including) | 9.0 (including) |
| Traveler | Ibm | 9.0.1 (including) | 9.0.1 (including) |