ZDI-23-1043: VBASE VISAM Automation Base VBASE-Editor GestureConfigurations File Parsing XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1043?
The severity of ZDI-23-1043 is classified as medium due to the potential for sensitive information disclosure.
How do I fix ZDI-23-1043?
To fix ZDI-23-1043, you should apply the latest security updates provided by VBASE for the VISAM Automation Base software.
What does ZDI-23-1043 exploit?
ZDI-23-1043 exploits a vulnerability that allows remote attackers to disclose sensitive information through user interaction.
Is user interaction required to exploit ZDI-23-1043?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file to exploit ZDI-23-1043.
Which software is vulnerable to ZDI-23-1043?
The vulnerability ZDI-23-1043 affects VBASE VISAM Automation Base installations.