CVE-2017-6323 XML external entity in ITMS
Attackers can exploit weak XML parsing in Symantec ITMS to disclose data, cause denial of service, or perform SSRF.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6323?
CVE-2017-6323 is a high-severity vulnerability in Symantec Corporation ITMS, published on 16 Apr 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML input containing a reference to an external entity is processed by a weakly configured XML parser. This attack may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspective of the machine where the parser is located, and other system impacts.
Weakness: CWE-611
Which versions are affected by CVE-2017-6323?
It affects 1 product.
Products include Symantec Management Console.
How do I fix CVE-2017-6323?
No fix has been published for CVE-2017-6323 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-6323 being exploited?
There is no known exploitation of CVE-2017-6323 in the wild and no public exploit code.
Other vulnerabilities in Symantec Corporation ITMS
Sources
Also known as GHSA-ph8x-8q5q-f3mh.