CVE-2022-22795

Signiant - Manager+Agents XML External Entity (XXE)

State: Published
Severity: 6.8 Medium
Published: Mar 9, 2022
Updated: Sep 17, 2024
Reserved: Jan 7, 2022

Description

Signiant - Manager+Agents XML External Entity (XXE) - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such as passwd, shadow, hosts and so on. By gaining access to these files, attackers can steal sensitive information from the victims machine.

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H	INCD

Weaknesses

CWE-611 Improper Restriction of XML External Entity Reference ('XXE')

Affected Products

Product	Versions
SigniantSigniant	Signiant Build 78045 13.5.0Affected Signiant Build 79008,14.0.0Affected Signiant Build 79687 14.1.0Affected Signiant Build 79687 15.0.0Affected

References

https://www.gov.il/en/departments/faq/cve_advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.