SSA-632164: External Entity Injection Vulnerability in Polarion ALM
Polarion ALM is vulnerable to XML External Entity (XXE) injection attack that could allow an attacker to potentially disclose confidential data. Siemens has released an update for Polarion ALM and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-28828US | — | — | ||
A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This could allow an attack… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - CSAF Versionself
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - HTML Versionself
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - PDF Versionself
- SSA-632164: External Entity Injection Vulnerability in Polarion ALM - TXT Versionself
Behebungen (2)
- MitigationPolarion ALM
Set the below configurations to mitigate against external entity injection in OpenSAML 4.x parser configuration. This will be included by default on Polarion V2304 and later versions. parserPool.setMaxPoolSize(100); parserPool.setCoalescing(true); parserPool.setIgnoreComments(true); parserPool.setIgnoreElementContentWhitespace(true); parserPool.setNamespaceAware(true); parserPool.setExpandEntityReferences(false); parserPool.setXincludeAware(false); final Map<String, Boolean> features = new HashMap<String, Boolean>(); features.put(http://xml.org/sax/features/external-general-entities, Boolean.FALSE); features.put(http://xml.org/sax/features/external-parameter-entities, Boolean.FALSE); features.put(http://apache.org/xml/features/disallow-doctype-decl, Boolean.TRUE); features.put(http://apache.org/xml/features/validation/schema/normalized-value, Boolean.FALSE); features.put(http://javax.xml.XMLConstants/feature/secure-processing, Boolean.TRUE); parserPool.setBuilderFeatures(features);
- BehobenPolarion ALM
Update to V22R2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan