ZDI-CAN-18903: ZDI-23-1043: VBASE VISAM Automation Base VBASE-Editor GestureConfigurations File Parsing XML External Entity Processing Information Disclosure Vulnerability
Published Aug 8, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
VBASE VISAM Automation Base
Event History
Aug 8, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-18903?
The severity of ZDI-CAN-18903 is classified as a medium-risk vulnerability.
2
How do I fix ZDI-CAN-18903?
To fix ZDI-CAN-18903, ensure that users are educated about avoiding malicious pages and files.
3
What type of attacks can exploit ZDI-CAN-18903?
ZDI-CAN-18903 can be exploited through remote attacks that require user interaction.
4
What software is affected by ZDI-CAN-18903?
ZDI-CAN-18903 affects the VBASE VISAM Automation Base software.
5
What information can be disclosed through ZDI-CAN-18903?
ZDI-CAN-18903 allows remote attackers to disclose sensitive information from affected installations.