Lucene search

K
cve[email protected]CVE-2013-3274
HistoryJul 19, 2013 - 2:36 p.m.

CVE-2013-3274

2013-07-1914:36:00
CWE-264
web.nvd.nist.gov
20
emc
avamar
server
virtual edition
data store
gen3
gen4
gen4s
java rmi
remote code execution
vulnerability
cve-2013-3274
nvd

7.5 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.7%

EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

7.5 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.7%

Related for CVE-2013-3274