ZDI-23-1037: VBASE VISAM Automation Base VBASE-Editor WebRemote File Parsing XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1037?
The severity of ZDI-23-1037 is classified as a medium risk, primarily due to the requirement for user interaction.
How do I fix ZDI-23-1037?
To fix ZDI-23-1037, ensure all users are updated with the latest patches from VBASE for VISAM Automation Base.
What type of attacks are possible with ZDI-23-1037?
ZDI-23-1037 allows remote attackers to disclose sensitive information if the user visits a malicious page or opens a malicious file.
Who is affected by ZDI-23-1037?
Organizations using VBASE VISAM Automation Base are at risk of exploitation from ZDI-23-1037.
What do I need to do to protect against ZDI-23-1037?
To protect against ZDI-23-1037, train users to recognize and avoid malicious links and files, as well as apply all relevant security updates.