ZDI-CAN-18907: ZDI-23-1040: VBASE VISAM Automation Base FB File Parsing XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-18907?
The severity of ZDI-CAN-18907 is categorized based on the potential impact and exploitability, allowing for the disclosure of sensitive information.
How do I fix ZDI-CAN-18907?
To fix ZDI-CAN-18907, ensure that users are educated about the risks of visiting untrusted pages or opening unknown files.
What software is affected by ZDI-CAN-18907?
ZDI-CAN-18907 affects installations of VBASE VISAM Automation Base.
Is user interaction required to exploit ZDI-CAN-18907?
Yes, user interaction is required for ZDI-CAN-18907 as the target must visit a malicious page or open a malicious file.
What type of attack does ZDI-CAN-18907 involve?
ZDI-CAN-18907 involves a remote attack that can lead to the disclosure of sensitive information.