VULNERABILITY INTELLIGENCE
CVE-2013-2035
CVSS score4.4 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2013-08-28
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')