← Back to CVE List

CVE-2023-37364

Published: 2023-08-03T03:15Z
Last Modified: 2024-11-21T08:11Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt