CVE-2013-1495

2013-03-1821:00:00

oracle

www.cve.org

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

JSON

asr in Oracle Auto Service Request in Oracle Support Tools before 4.3.2 allows local users to modify arbitrary files via a symlink attack on a predictable filename in /tmp.

References

seclists.org/fulldisclosure/2013/Feb/159

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html