CVE-2013-6469

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-6469
JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.

6.5 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/57843 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1051279
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:jboss_fuse_service_works:6.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_overlord_run_time_governance:1.0:*:*:*:*:jbossas:*:*
History

07 Nov 2023, 02:17

Type Values Removed Values Added
Summary JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information. JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.

13 Feb 2023, 04:50

Type Values Removed Values Added
Summary JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information. JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.
Information

Published : 2014-04-22 13:06

Updated : 2023-12-10 11:31

NVD link : CVE-2013-6469

Mitre link : CVE-2013-6469

CVE.ORG link : CVE-2013-6469

JSON object : View

Products Affected

redhat

  • jboss_fuse_service_works
  • jboss_overlord_run_time_governance
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')