cve/2019/CVE-2019-14258.md

CVE-2019-14258

Description

The XML-RPC subsystem in Zenoss 2.5.3 allows XXE attacks that lead to unauthenticated information disclosure via port 9988.

POC

Reference

• https://www.coalfire.com/The-Coalfire-Blog
• https://www.coalfire.com/The-Coalfire-Blog/August-2019/Getting-more-from-a-compliance-test

Github

No PoCs found on GitHub currently.