CVE-2013-4373

The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:S/C:N/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
redhatjboss_operations_network
3.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2013-1448.html
https://bugzilla.redhat.com/show_bug.cgi?id=1011824
https://exchange.xforce.ibmcloud.com/vulnerabilities/88179
http://rhn.redhat.com/errata/RHSA-2013-1448.html
https://bugzilla.redhat.com/show_bug.cgi?id=1011824
https://exchange.xforce.ibmcloud.com/vulnerabilities/88179