XML External Entity injection in Apache Ivy - CVE-2023-46751

Vulnerability identifier: #VU83447

CSH Severity: High

CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-46751

CWE-ID: CWE-611

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied XML input. A remote attacker can pass a specially crafted XML code to the affected application and view contents of arbitrary files on the system or initiate requests to external systems.

Successful exploitation of the vulnerability may allow an attacker to view contents of arbitrary file on the server or perform network scanning of internal and external infrastructure.

Apache Ivy
Amazon Linux AMI
Debian Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Migration Toolkit for Containers
IBM Watson Assistant for IBM Cloud Pak for Data
ghostscript (Red Hat package)
ghostscript
ghostscript-help
ghostscript-debuginfo
ghostscript-devel
ghostscript-tools-dvipdf
ghostscript-debugsource
ghostscript-x11-debuginfo
ghostscript-x11
ghostscript-tools-fonts
ghostscript-tools-printing
libgs
libgs-devel
ghostscript-doc
ghostscript (Ubuntu package)
ghostscript (Debian package)

Install updates from vendor's website.

Apache Ivy - update to 2.5.2
Migration Toolkit for Containers - update to 1.8.7
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.4
ghostscript (Red Hat package) - addressed in versions 9.27-16.el8_10, 9.54.0-18.el9_6
ghostscript - addressed in versions 9.52-10, 9.55.0-6, 9.55.0-7
ghostscript-help - addressed in versions 9.52-10, 9.55.0-6, 9.55.0-7
ghostscript-debuginfo - addressed in versions 9.52-10, 9.55.0-6, 9.55.0-7
ghostscript-devel - addressed in versions 9.52-10, 9.55.0-6, 9.55.0-7
ghostscript-tools-dvipdf - addressed in versions 9.52-10, 9.55.0-6, 9.55.0-7
ghostscript-debugsource - addressed in versions 9.52-10, 9.55.0-6, 9.55.0-7
ghostscript-devel - addressed in versions 9.52-23.63.1, 9.52-150000.177.1
ghostscript-debuginfo - addressed in versions 9.52-23.63.1, 9.52-150000.177.1
ghostscript-debugsource - addressed in versions 9.52-23.63.1, 9.52-150000.177.1
ghostscript-x11-debuginfo - addressed in versions 9.52-23.63.1, 9.52-150000.177.1
ghostscript - addressed in versions 9.52-23.63.1, 9.52-150000.177.1
ghostscript-x11 - addressed in versions 9.52-23.63.1, 9.52-150000.177.1
ghostscript-tools-fonts - update to 9.54.0-18.0.1
ghostscript-tools-printing - update to 9.54.0-18.0.1
ghostscript-x11 - update to 9.54.0-18.0.1
libgs - update to 9.54.0-18.0.1
libgs-devel - update to 9.54.0-18.0.1
ghostscript-tools-dvipdf - update to 9.54.0-18.0.1
ghostscript-doc - update to 9.54.0-18.0.1
ghostscript - update to 9.54.0-18.0.1
ghostscript (Ubuntu package) - addressed in versions 9.55.0~dfsg1-0ubuntu5.6, 10.0.0~dfsg1-0ubuntu1.5, 10.01.2~dfsg1-0ubuntu2.2
ghostscript - update to 9.56.1-7
ghostscript (Debian package) - update to 10.0.0~dfsg-11+deb12u3

• https://www.ibm.com/support/pages/node/7077734

• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Ubuntu update for ghostscript
• Debian update for ghostscript
• SUSE update for ghostscript
• SUSE update for ghostscript
• openEuler 22.03 LTS SP1 update for ghostscript
• openEuler update for ghostscript
• openEuler 22.03 LTS SP3 update for ghostscript
• Amazon Linux AMI update for ghostscript
• Red Hat Enterprise Linux 8 update for ghostscript
• Red Hat Enterprise Linux 9 update for ghostscript
• Anolis OS update for ghostscript
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8