CWE Code: 611
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Improper Restriction of XML External Entity Reference
Summary: in single sign-on for pivotal cloud foundry (pcf) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an xxe (xml external entity) attack was discovered in the single sign-on service dashboard. privileged users can in some cases upload malformed xml leading to exposure of data on the single sign-on service broker file system.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-09-09
Last Modified Date: 2017-09-19