ZDI-CAN-19107: ZDI-23-1042: VBASE VISAM Automation Base FB.XML File Parsing XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VBASE VISAM Automation Base. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19107?
The severity of ZDI-CAN-19107 is categorized as medium risk due to its potential for sensitive information disclosure.
How do I fix ZDI-CAN-19107?
To fix ZDI-CAN-19107, ensure that your VBASE VISAM Automation Base installation is updated to the latest version provided by the vendor.
Who is affected by ZDI-CAN-19107?
VBASE VISAM Automation Base installations are affected by ZDI-CAN-19107.
What type of attack does ZDI-CAN-19107 enable?
ZDI-CAN-19107 allows remote attackers to disclose sensitive information, requiring user interaction to exploit.
Is user interaction required to exploit ZDI-CAN-19107?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file for ZDI-CAN-19107 to be exploited.