VULNERABILITY INTELLIGENCE

CVE-2013-4373

CVSS score3.2 LOW
EPSS probability0.30%
CISA KEVNot currently listed
Published2013-10-24
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:S/C:N/I:P/A:P

Description

The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references