CVE-2014-0171 Information

Description

XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint.

Reference

http://rhn.redhat.com/errata/RHSA-2015-0034.html https://issues.jboss.org/browse/TEIID-2911