ID:6114 - Exploit for XXE attack in Microsoft SQL Server Management Studio - CVE-2018-8532

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to conduct XXE-attack.

The vulnerability exists due to an error when parsing a malicious XMLA file containing a reference to an external entity. A remote attacker can trick the victim into opening a specially crafted XML file and gain access to potentially sensitive information.

Remediation