CVE-2022-33739 - CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system

Back Back to CVE browser

HIGH

CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system

Published Jun 16, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.24%

Description

CA Clarity 15.8 and below and 15.9.0 contain an insecure XML parsing vulnerability that could allow a remote attacker to potentially view the contents of any file on the system.

Affected products

Vendor n/a Product CA Clarity Default
n/a
- Version
  15.8 and below, 15.9.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

CA Clarity

n/a

Version	Status	Constraints
15.8 and below, 15.9.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-91

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36778
Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20645
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36778		Advisory
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/20645		x_refsource_MISCVendor Advisory