Vulnerability Description
An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Project Portfolio Management | <= 14.3 |
| Ca | Project Portfolio Management | 15.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
- http://www.securityfocus.com/bid/105297Third Party AdvisoryVDB Entry
- https://support.ca.com/us/product-content/recommended-reading/security-notices/cPatchVendor Advisory
FAQ
What is CVE-2018-13823?
CVE-2018-13823 is a vulnerability with a CVSS score of 7.5 (HIGH). An XML external entity vulnerability in the XOG functionality, in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows remote attackers to access sensitive information...
How severe is CVE-2018-13823?
CVE-2018-13823 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-13823?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Project Portfolio Management, Ca Project Portfolio Management.