nuclei-templates/http/cves/2020/CVE-2020-4463.yaml

id: CVE-2020-4463

info:
  name: IBM Maximo Asset Management Information Disclosure - XML External Entity Injection
  author: dwisiswant0
  severity: high
  description: |
    IBM Maximo Asset Management is vulnerable to an
    XML external entity injection (XXE) attack when processing XML data.
    A remote attacker could exploit this vulnerability to expose
    sensitive information or consume memory resources.
  remediation: |
    Apply the latest security patches or updates provided by IBM to mitigate the vulnerability.
  reference:
    - https://www.ibm.com/support/pages/security-bulletin-ibm-maximo-asset-management-vulnerable-information-disclosure-cve-2020-4463
    - https://github.com/Ibonok/CVE-2020-4463
    - https://exchange.xforce.ibmcloud.com/vulnerabilities/181484
    - https://www.ibm.com/support/pages/node/6253953
    - https://nvd.nist.gov/vuln/detail/CVE-2020-4463
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
    cvss-score: 8.2
    cve-id: CVE-2020-4463
    cwe-id: CWE-611
    epss-score: 0.68764
    epss-percentile: 0.97662
    cpe: cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 2
    vendor: ibm
    product: maximo_asset_management
    shodan-query: http.favicon.hash:-399298961
  tags: cve,cve2020,ibm,xxe,disclosure

http:
  - method: POST
    path:
      - "{{BaseURL}}/os/mxperson"
      - "{{BaseURL}}/meaweb/os/mxperson"

    body: |
      <?xml version='1.0' encoding='UTF-8'?>
      <max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>
        <max:MXPERSONQuery></max:MXPERSONQuery>
      </max:QueryMXPERSON>

    headers:
      Content-Type: "application/xml"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "QueryMXPERSONResponse"
          - "MXPERSONSet"

      - type: word
        part: header
        words:
          - "application/xml"
# digest: 490a0046304402201f7760cce77813bdc1565d623727135ab08644c6e9ccf0fbbf851dd4a0fe1a4a022049c4df3b057338069643df7c5a8dbae7bf9ec0eb76ce0a6064f89e7a08370e06:922c64590222798bb761d5b6d8e72950
misc changes 2021-01-02 04:56:15 +00:00			`id: CVE-2020-4463`
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00
			`info:`
Enhancement: cves/2020/CVE-2020-4463.yaml by mp 2022-06-28 19:13:35 +00:00			`name: IBM Maximo Asset Management Information Disclosure - XML External Entity Injection`
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`author: dwisiswant0`
			`severity: high`
			`description: \|`
			`IBM Maximo Asset Management is vulnerable to an`
Enhancement: cves/2020/CVE-2020-4463.yaml by mp 2022-06-28 19:03:43 +00:00			`XML external entity injection (XXE) attack when processing XML data.`
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`A remote attacker could exploit this vulnerability to expose`
			`sensitive information or consume memory resources.`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`remediation: \|`
			`Apply the latest security patches or updates provided by IBM to mitigate the vulnerability.`
Removed pipe (\|) character from references, because the structure requires it to be a string slice, not a string Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-18 11:37:49 +00:00			`reference:`
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`- https://www.ibm.com/support/pages/security-bulletin-ibm-maximo-asset-management-vulnerable-information-disclosure-cve-2020-4463`
			`- https://github.com/Ibonok/CVE-2020-4463`
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com> 2022-05-17 09:18:12 +00:00			`- https://exchange.xforce.ibmcloud.com/vulnerabilities/181484`
			`- https://www.ibm.com/support/pages/node/6253953`
Enhancement: cves/2020/CVE-2020-4463.yaml by mp 2022-06-28 19:03:43 +00:00			`- https://nvd.nist.gov/vuln/detail/CVE-2020-4463`
Added cve annotations + severity adjustments 2021-09-10 11:26:40 +00:00			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`cvss-score: 8.2`
Added cve annotations + severity adjustments 2021-09-10 11:26:40 +00:00			`cve-id: CVE-2020-4463`
			`cwe-id: CWE-611`
TemplateMan Update [Thu Nov 16 10:31:48 UTC 2023] :robot: 2023-11-16 10:31:49 +00:00			`epss-score: 0.68764`
TemplateMan Update [Thu Nov 23 06:31:40 UTC 2023] :robot: 2023-11-23 06:31:41 +00:00			`epss-percentile: 0.97662`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`cpe: cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:::::::*`
Update CVE-2020-4463.yaml 2022-07-04 13:17:38 +00:00			`metadata:`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`max-request: 2`
CVE Enrichment :tada: 2023-07-11 19:49:27 +00:00			`vendor: ibm`
			`product: maximo_asset_management`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`shodan-query: http.favicon.hash:-399298961`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`tags: cve,cve2020,ibm,xxe,disclosure`
Adding small note 2020-12-07 15:00:11 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`- method: POST`
			`path:`
			`- "{{BaseURL}}/os/mxperson"`
			`- "{{BaseURL}}/meaweb/os/mxperson"`
CVE Enrichment :tada: 2023-07-11 19:49:27 +00:00
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`body: \|`
			`<?xml version='1.0' encoding='UTF-8'?>`
			`<max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>`
			`<max:MXPERSONQuery></max:MXPERSONQuery>`
			`</max:QueryMXPERSON>`
CVE Enrichment :tada: 2023-07-11 19:49:27 +00:00
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`headers:`
CVE Enrichment :tada: 2023-07-11 19:49:27 +00:00			`Content-Type: "application/xml"`
Update CVE-2020-4463.yaml 2022-07-02 11:33:45 +00:00
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: word`
Update CVE-2020-4463.yaml 2022-07-02 11:33:45 +00:00			`part: body`
:fire: Add CVE-2020-4463 2020-12-07 07:59:25 +00:00			`words:`
			`- "QueryMXPERSONResponse"`
			`- "MXPERSONSet"`
Update CVE-2020-4463.yaml 2022-07-02 11:33:45 +00:00
			`- type: word`
			`part: header`
			`words:`
			`- "application/xml"`
Auto Template Signing [Thu Nov 23 06:41:09 UTC 2023] :robot: 2023-11-23 06:41:10 +00:00			`# digest: 490a0046304402201f7760cce77813bdc1565d623727135ab08644c6e9ccf0fbbf851dd4a0fe1a4a022049c4df3b057338069643df7c5a8dbae7bf9ec0eb76ce0a6064f89e7a08370e06:922c64590222798bb761d5b6d8e72950`