CVE-2021-29831

https://notcve.org/view.php?id=CVE-2021-29831

21 Sep 2021 — IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 204775. IBM Jazz for Service Management versión 1.1.3.10 e IBM Tivoli Netcool/OMNIbus_GUI son vulnerables a un ataque de tipo XML External Entity Injection (XXE) cuando son procesados datos XML. Un atacante remoto podrí... • https://exchange.xforce.ibmcloud.com/vulnerabilities/204775 • CWE-611: Improper Restriction of XML External Entity Reference •