CVE-2014-0171: Medium severity red hat jboss data virtualization vulnerability
XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0171?
CVE-2014-0171 has a moderate severity level as it allows remote attackers to read arbitrary files.
How do I fix CVE-2014-0171?
To fix CVE-2014-0171, upgrade to Red Hat JBoss Data Virtualization version 6.0.0 patch 4 or later.
What systems are affected by CVE-2014-0171?
CVE-2014-0171 affects Red Hat JBoss Data Virtualization versions prior to 6.0.0 patch 4 and Odata4j.
What is an XML External Entity (XXE) vulnerability like CVE-2014-0171?
An XML External Entity (XXE) vulnerability allows attackers to exploit XML parsers to access files on the server.
How can I mitigate risks associated with CVE-2014-0171?
To mitigate risks, avoid processing XML input from untrusted sources and implement security controls in your application.