CVE-2018-13823: XEE
First published: Wed Aug 29 2018(Updated: )
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.
Credit: vuln@ca.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Project Portfolio Management | <=14.3 | |
| Broadcom Project Portfolio Management | =14.4 | |
| Broadcom Project Portfolio Management | =15.1 | |
| Micro Focus Project and Portfolio Management | =15.2-cp5 | |
| Micro Focus Project and Portfolio Management | =15.3-cp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-13823?
CVE-2018-13823 has been classified as a moderate severity vulnerability, allowing unauthorized access to sensitive information.
How do I fix CVE-2018-13823?
To fix CVE-2018-13823, upgrade to CA PPM version 15.3 CP3 or later, or apply the necessary patches provided by Broadcom.
What types of attacks can exploit CVE-2018-13823?
CVE-2018-13823 can be exploited by remote attackers using XML external entity (XXE) attacks to access sensitive data.
Which versions of CA PPM are affected by CVE-2018-13823?
CVE-2018-13823 affects CA PPM versions 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below.
What is the impact of CVE-2018-13823 on system security?
The impact of CVE-2018-13823 on system security includes potential unauthorized disclosure of sensitive information, leading to data breaches.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/remedy
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/broadcom
- canonical/broadcom project portfolio management
- version/broadcom project portfolio management/14.3
- version/broadcom project portfolio management/14.4
- version/broadcom project portfolio management/15.1
- vendor/ca
- canonical/micro focus project and portfolio management
- version/micro focus project and portfolio management/15.2-cp5
- version/micro focus project and portfolio management/15.3-cp2