CVE-2014-8474: High severity ca cloud service management vulnerability
CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8474?
CVE-2014-8474 has a critical severity rating due to its potential for remote file reading and denial of service.
How do I fix CVE-2014-8474?
To mitigate CVE-2014-8474, upgrade to the latest version of CA Cloud Service Management beyond the Summer 2014 release.
What systems are affected by CVE-2014-8474?
CVE-2014-8474 affects CA Cloud Service Management versions prior to Summer 2014.
What are the potential impacts of CVE-2014-8474?
The potential impacts of CVE-2014-8474 include unauthorized file access, the ability to request internal network resources, and resource exhaustion leading to denial of service.
Can CVE-2014-8474 be exploited remotely?
Yes, CVE-2014-8474 can be exploited remotely, allowing attackers to leverage its vulnerabilities from an external location.