RSA Enterprise Compromise Assessment Tool (ECAT) version 4.1.0.1 suffers from an XML external entity injection vulnerability. Continue reading...