CVE-2013-4373

EUVD-2013-4255
The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:S/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
Affected Products (NVD)
VendorProductVersion
redhatjboss_operations_network
3.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2013-1448.html
https://bugzilla.redhat.com/show_bug.cgi?id=1011824
https://exchange.xforce.ibmcloud.com/vulnerabilities/88179
http://rhn.redhat.com/errata/RHSA-2013-1448.html
https://bugzilla.redhat.com/show_bug.cgi?id=1011824
https://exchange.xforce.ibmcloud.com/vulnerabilities/88179