CVE-2020-7032 – Avaya WebLM Improper Restriction of XML External Entity Reference

https://notcve.org/view.php?id=CVE-2020-7032

13 Nov 2020 — An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request. Affected versions of Avaya WebLM include: 7.0 through 7.1.3.6 and 8.0 through 8.1.2. Una vulnerabilidad de tipo XML external entity (XXE) en la interfaz de administración de Avaya WebLM, permite a usuarios autenticados leer archivos arbitrarios o realizar ataques de tipo server-side request forg... • https://packetstorm.news/files/id/160123 • CWE-611: Improper Restriction of XML External Entity Reference •