IBM Security Bulletin: IBM Security Guardium is affected by XML External Entity vulnerability (CVE-2017-1254)

IBM Security Guardium is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM Security Guardium has fixed this vulnerability

CVE(s): CVE-2017-1254

Affected product(s) and affected version(s):

IBM Security Guardium V10.0, 10.0.1, 10.1, 10.1.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tbLGIP
X-Force Database: http://ift.tt/2ssgYyf

The post IBM Security Bulletin: IBM Security Guardium is affected by XML External Entity vulnerability (CVE-2017-1254) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2tbPzNX