medium4.9Public exploit code
CVE-2018-10077
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities2018-04-18 · webapps · xml
Impact
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vertiv | Watchdog Console | Version 3.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
- https://www.exploit-db.com/exploits/44493/
- http://packetstormsecurity.com/files/147253/Geist-WatchDog-Console-3.2.2-XSS-XML-Injection-Insecure-Permissions.html
- https://www.exploit-db.com/exploits/44493/