CVE-2022-33739 XML external entity in CA Clarity
Remote attackers can exploit insecure XML parsing in CA Clarity to view arbitrary files on the system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-33739?
CVE-2022-33739 is a high-severity vulnerability in CA Clarity, published on 16 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system.
Weakness: CWE-91
Which versions are affected by CVE-2022-33739?
It affects 1 product.
Products include Broadcom Ca Clarity.
How do I fix CVE-2022-33739?
No fix has been published for CVE-2022-33739 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-33739 being exploited?
There is no known exploitation of CVE-2022-33739 in the wild and no public exploit code.
Sources
Also known as GHSA-ggrx-pp2h-rw56.