CVE-2012-4399

The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://bakery.cakephp.org/articles/markstory/2012/07/14/security_release_-_cakephp_2_1_5_2_2_1	Broken Link Vendor Advisory
http://seclists.org/bugtraq/2012/Jul/101	Exploit Mailing List Third Party Advisory
http://secunia.com/advisories/49900	Broken Link Vendor Advisory
http://www.exploit-db.com/exploits/19863	Exploit Third Party Advisory VDB Entry
http://www.openwall.com/lists/oss-security/2012/09/03/1	Mailing List
http://www.openwall.com/lists/oss-security/2012/09/03/2	Mailing List
http://www.osvdb.org/84042	Broken Link

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cakefoundation:cakephp::::::::
	cpe:2.3:a:cakefoundation:cakephp::::::::

History

No history.

Information

Published : 2012-10-09 23:55

Updated : 2024-02-15 03:23

NVD link : CVE-2012-4399

Mitre link : CVE-2012-4399

CVE.ORG link : CVE-2012-4399

JSON object : View

Products Affected

cakefoundation

cakephp

CWE

CWE-611

Improper Restriction of XML External Entity Reference

{"id": "CVE-2012-4399", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2012-10-09T23:55:05.047", "references": [{"url": "http://bakery.cakephp.org/articles/markstory/2012/07/14/security_release_-_cakephp_2_1_5_2_2_1", "tags": ["Broken Link", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://seclists.org/bugtraq/2012/Jul/101", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/49900", "tags": ["Broken Link", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.exploit-db.com/exploits/19863", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/09/03/1", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/09/03/2", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/84042", "tags": ["Broken Link"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-611"}]}], "descriptions": [{"lang": "en", "value": "The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack."}, {"lang": "es", "value": "La clase Xml en CakePHP v2.1.x antes de v2.1.5 y v2.2.x antes de v2.2.1 permite a atacantes remotos leer archivos de su elecci\u00f3n a trav\u00e9s de datos XML que contienen referencias externas a la entidad. Se trata de un problema tambi\u00e9n conocido como ataque de inyecci\u00f3n de entidad externa XML (XXE).\r\n"}], "lastModified": "2024-02-15T03:23:23.083", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cakefoundation:cakephp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8014FFA3-4C7C-49FE-BEA6-FB746217648F", "versionEndExcluding": "2.1.5", "versionStartIncluding": "2.1.0"}, {"criteria": "cpe:2.3:a:cakefoundation:cakephp:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14D77E0C-4AB9-4542-AD3C-7EE88550E11E", "versionEndExcluding": "2.2.1", "versionStartIncluding": "2.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}