Lucene search

[email protected]CVE-2013-6468

HistoryApr 10, 2014 - 8:29 p.m.

CVE-2013-6468

2014-04-1020:29:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2013-6468

jboss

red hat

brms

bpm suite

remote code execution

mvel

drools

9.3 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.9%

JSON

JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.

CPENameOperatorVersion
redhat:jboss_bpm_suiteredhat jboss bpm suiteeq6.0.0
redhat:jboss_enterprise_brms_platformredhat jboss enterprise brms platformeq6.0.0
redhat:jboss_droolsredhat jboss droolseq-

CPE	Name	Operator	Version
redhat:jboss_bpm_suite	redhat jboss bpm suite	eq	6.0.0
redhat:jboss_enterprise_brms_platform	redhat jboss enterprise brms platform	eq	6.0.0
redhat:jboss_drools	redhat jboss drools	eq	-

References

rhn.redhat.com/errata/RHSA-2014-0371.html

rhn.redhat.com/errata/RHSA-2014-0372.html

secunia.com/advisories/57716

secunia.com/advisories/57719

9.3 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

68.9%

JSON

Related for CVE-2013-6468

seebug1 prion1 redhat2