Vulnerability identifier: #VU13606

Vulnerability risk: Low

CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2018-1542

CWE-ID: CWE-611

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
IBM Content Foundation
Client/Desktop applications / File managers, FTP clients
IBM FileNet Content Manager
Client/Desktop applications / File managers, FTP clients

Vendor: IBM Corporation

Description

The disclosed vulnerability allows a remote authenticated attacker to perform XXE attack.

The weakness exists due to an error when processing malicious XML data. A remote attacker can supply specially crafted XML External Entity (XXE) data to the target Administration Console for Content Platform Engine (ACCE) interface component to read files with elevated privileges or consume excessive memory and cause the service to crash.

Mitigation
The vulnerability is addressed in the versions 5.2.1.7, 5.5.1.

Vulnerable software versions

IBM Content Foundation: 5.2.1 - 5.5.0

IBM FileNet Content Manager: 5.2.1 - 5.5.0

---

External links
http://www-01.ibm.com/support/docview.wss?uid=swg22015943

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.