Lucene search
HistoryJun 17, 2013 - 3:29 a.m.
CVE-2013-3520
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.923 High
EPSS
Percentile
99.0%
VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
Node
vmwarevcenter_chargeback_managerRange≤2.5.0
ORvmwarevcenter_chargeback_managerMatch1.5.0
ORvmwarevcenter_chargeback_managerMatch1.6.0
ORvmwarevcenter_chargeback_managerMatch1.6.1
ORvmwarevcenter_chargeback_managerMatch1.6.2
ORvmwarevcenter_chargeback_managerMatch2.0.0
ORvmwarevcenter_chargeback_managerMatch2.0.1
Related
zdi
zdi
checkpoint_advisories
checkpoint_advisories
cve
cve
CVE-2013-3520
2022-10-03 16:14:45
nessus
nessus
VMware vCenter Chargeback Manager Remote Code Execution (VMSA-2013-0008)
2013-06-14 00:00:00
packetstorm
packetstorm
VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload
2013-07-23 00:00:00
cvelist
cvelist
CVE-2013-3520
2022-10-03 16:14:45
vmware
vmware
VMware vCenter Chargeback Manager Remote Code Execution
2013-06-11 00:00:00
prion
prion
Code injection
2013-06-17 03:29:00
zdt
zdt
VMware vCenter Chargeback Manager ImageUploadServlet Arbitrary File Upload
2013-07-23 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.923 High
EPSS
Percentile
99.0%
Related for NVD:CVE-2013-3520