SSA-632164: External Entity Injection Vulnerability in Polarion ALM
Polarion ALM is vulnerable to XML External Entity (XXE) injection attack that could allow an attacker to potentially disclose confidential data. Siemens has released an update for Polarion ALM and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-28828US | — | — | ||
A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attack… | ||||
references
External citations — patches, advisories, analysis.
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - CSAF Versionself
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - HTML Versionself
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - PDF Versionself
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - TXT Versionself
remediations (2)
- MitigationPolarion ALM
Set the below configurations to mitigate against external entity injection in OpenSAML 4.x parser configuration. This will be included by default on Polarion V2304 and later versions. parserPool.setMaxPoolSize(100); parserPool.setCoalescing(true); parserPool.setIgnoreComments(true); parserPool.setIgnoreElementContentWhitespace(true); parserPool.setNamespaceAware(true); parserPool.setExpandEntityReferences(false); parserPool.setXincludeAware(false); final Map<String, Boolean> features = new HashMap<String, Boolean>(); features.put(http://xml.org/sax/features/external-general-entities, Boolean.FALSE); features.put(http://xml.org/sax/features/external-parameter-entities, Boolean.FALSE); features.put(http://apache.org/xml/features/disallow-doctype-decl, Boolean.TRUE); features.put(http://apache.org/xml/features/validation/schema/normalized-value, Boolean.FALSE); features.put(http://javax.xml.XMLConstants/feature/secure-processing, Boolean.TRUE); parserPool.setBuilderFeatures(features);
- FixedPolarion ALM
Update to V22R2 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan