CVE-2018-16166

LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-611

Affected products

• Logontracer (Jpcert)
• Logontracer (Jpcert Coordination Center)

References

• https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.1
• https://jvn.jp/en/vu/JVNVU98026636/index.html