CVE-2018-13823: XEE
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13823?
CVE-2018-13823 has been classified as a moderate severity vulnerability, allowing unauthorized access to sensitive information.
How do I fix CVE-2018-13823?
To fix CVE-2018-13823, upgrade to CA PPM version 15.3 CP3 or later, or apply the necessary patches provided by Broadcom.
What types of attacks can exploit CVE-2018-13823?
CVE-2018-13823 can be exploited by remote attackers using XML external entity (XXE) attacks to access sensitive data.
Which versions of CA PPM are affected by CVE-2018-13823?
CVE-2018-13823 affects CA PPM versions 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below.
What is the impact of CVE-2018-13823 on system security?
The impact of CVE-2018-13823 on system security includes potential unauthorized disclosure of sensitive information, leading to data breaches.