| Vulnerability Name: | CVE-2013-4373 (CCN-88179) | ||||||||
| Assigned: | 2013-10-21 | ||||||||
| Published: | 2013-10-21 | ||||||||
| Updated: | 2017-08-29 | ||||||||
| Summary: | The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files. | ||||||||
| CVSS v3 Severity: | 3.9 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 3.2 Low (CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:P/A:P) 2.8 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:P/A:P/E:H/RL:OF/RC:C)
2.8 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:P/A:P/E:H/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-20 | ||||||||
| Vulnerability Consequences: | File Manipulation | ||||||||
| References: | Source: MITRE Type: CNA CVE-2013-4373 Source: REDHAT Type: Vendor Advisory RHSA-2013:1448 Source: CCN Type: JBoss Operations Network Web site Red Hat | JBoss Operations Network Source: CCN Type: BID-63253 Red Hat JBoss Operations Network 'storeFiles()' Insecure Temporary Directory Creation Vulnerability Source: CCN Type: Red Hat Bugzilla Bug 1011824 (CVE-2013-4373) CVE-2013-4373 JON Drift: Malicious drift file import due to insecure temporary file usage Source: CONFIRM Type: Vendor Advisory https://bugzilla.redhat.com/show_bug.cgi?id=1011824 Source: XF Type: UNKNOWN jon-cve20134373-insecure-permissions(88179) Source: XF Type: UNKNOWN jon-cve20134373-insecure-permissions(88179) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||