CVE-2009-3960

Adobe BlazeDS Information Disclosure Vulnerability

Blazeds

Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive information via vectors that are associated with a request, and related to injected tags and external entity references in XML documents.

15. Feb 2010

Ausgewertete Quellen

• Hersteller
  http://www.adobe.com/support/security/bulletins/apsb10-05.html
• Hinweis
  http://securitytracker.com/id?1023584
• Hinweis
  http://www.securityfocus.com/bid/38197
• Hinweis
  https://www.exploit-db.com/exploits/41855/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3960
• CISA
  Adobe BlazeDS Information Disclosure Vulnerability
• NVD
  CVE-2009-3960