CVE-2020-9352: XEE
An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the transaction parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Protect the SmartClient tools path on the web server with normal authentication and authorization so only administrators or end users can access it, preventing unauthenticated use of the downloadWSDL feature at /tools/developerConsoleOperations.jsp with payloads in the _transaction parameter.
Web server hosting SmartClient Developer Console tools (downloadWSDL via /tools/developerConsoleOperations.jsp) Access control for the tools path (/tools/...) = restricted to administrators or end users only (authenticate and authorize requests) - Compensating control
Deploy SmartClient only into a trusted environment to reduce risk of unauthenticated exploitation of blind XXE in the downloadWSDL feature (SmartClient 12.0).
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9352?
CVE-2020-9352 is considered a high severity vulnerability due to its potential for unauthenticated exploitation.
How do I fix CVE-2020-9352?
To fix CVE-2020-9352, update SmartClient to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2020-9352?
CVE-2020-9352 is classified as a blind XML External Entity (XXE) vulnerability.
What is affected by CVE-2020-9352?
CVE-2020-9352 affects SmartClient version 12.0.
How can CVE-2020-9352 be exploited?
CVE-2020-9352 can be exploited by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter.