NetSight
IP …
high7.1

CVE-2015-8698

CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 a…

Impact

CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

VendorProductAffected versions
BroadcomRelease Automation
from 5.0.2 before 5.0.2-227
from 5.5.1 before 5.5.1-1616
from 5.5.2 before 5.5.2-434
from 6.1.0 before 6.1.0-1026

References