IPSwitch WhatsUp Gold does not validate commands when deserializing XML objects

Discussion in 'other security issues & news' started by ronjor, Jan 7, 2016.

  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,802
    Location:
    Texas
    https://www.kb.cert.org/vuls/id/753264
     
Loading...