derby: information leak
| Package(s): | derby | CVE #(s): | CVE-2015-1832 | ||||||||
| Created: | October 14, 2016 | Updated: | November 18, 2016 | ||||||||
| Description: | From the openSUSE bug report:
Apache Derby could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML datatype and XmlVTI. An attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service. | ||||||||||
| Alerts: |
| ||||||||||