Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CA Release Automation 安全漏洞
Vulnerability Description
CA Release Automation（前称CA LISA Release Automation）是美国CA公司的一套企业级发布自动化解决方案。该方案可在应用生命周期中实现持续交付，并能够简化和执行应用发布、集中处理从开发到生产的应用操作、通过仪表板监督和审核整个部署过程等。 CA Release Automation中存在安全漏洞。远程攻击者可通过发送带有XML外部实体声明和实体引用的请求利用该漏洞读取任意文件，或造成拒绝服务。以下版本受到影响：CA Release Automation 5.0.2
CVSS Information
N/A
Vulnerability Type
N/A