Lucene search
PRIOn knowledge basePRION:CVE-2013-4836HistoryNov 04, 2013 - 4:55 p.m.
Design/Logic Flaw
2013-11-0416:55:00
PRIOn knowledge base
www.prio-n.com
2
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.149 Low
EPSS
Percentile
95.7%
Unspecified vulnerability in the GossipService SOAP Request implementation in the Synchronizer component before 1.4.2 in HP Application LifeCycle Management (ALM) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1759.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alm_synchronizer | le | 1.41 | |
| alm_synchronizer | eq | 1.10 | |
| alm_synchronizer | eq | 1.20 | |
| alm_synchronizer | eq | 1.30 | |
| alm_synchronizer | eq | 1.40 |
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.149 Low
EPSS
Percentile
95.7%
Related for PRION:CVE-2013-4836