Adobe LiveCycle Data Services XML Processing Flaw Lets Remote Users Obtain Potentially Sensitive Information on the Target System : 8/20/2015 3:38:02 AM
 | This set of templates helps you define your app feature roadmap, now and over time. From our sponsors  |
| Vulnerability Databse |
| This module replaces the description field of a feed to the page it links to (in addition, it wipes out the content:encoded field), so you can get its full text. |
Adobe LiveCycle Data Services XML Processing Flaw Lets Remote Users Obtain Potentially Sensitive Information on the Target System
8/20/2015 12:00:00 AM
| Adobe LiveCycle Data Services XML Processing Flaw Lets Remote Users Obtain Potentially Sensitive Information on the Target System |
| SecurityTracker Alert ID: 1033337 |
| SecurityTracker URL: http://securitytracker.com/id/1033337 |
| CVE Reference: CVE-2015-3269 (Links to External Site) |
| Date: Aug 20 2015 |
| Impact: Disclosure of system information, Disclosure of user information |
| Fix Available: Yes Vendor Confirmed: Yes |
| Version(s): 4.7, 4.6.2, 4.5, 3.0.x |
| Description: A vulnerability was reported in Adobe LiveCycle Data Services. A remote user can obtain potentially sensitive information on the target system. A remote user can send specially crafted XML data to obtain potentially sensitive information from the target system. Matthias Kaiser of Code White reported this vulnerability. |
| Impact: A remote user can obtain potentially sensitive information on the target system. |
| Solution: The vendor has issued a fix (3.0.0.354170, 4.5.1.354169, 4.6.2.354169, 4.7.0.354169). The vendor's advisory is available at: https://helpx.adobe.com/security/products/livecycleds/apsb15-20.html |
| Vendor URL: helpx.adobe.com/security/products/livecycleds/apsb15-20.html (Links to External Site) |
| Cause: Access control error |
| Underlying OS: UNIX (Any), Windows (Any) |
| |
| Message History: None. |
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
