CVE-2013-1768
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 9.5%
probabilidad de explotación
9.5%top 5% de las CVE
explotación observada
noninguna fuente lo reporta
The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.
Productos afectados
n/a · n/aReferencias
http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0099.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1862.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/82268http://svn.apache.org/viewvc?view=revision&revision=1462076http://svn.apache.org/viewvc?view=revision&revision=1462225http://svn.apache.org/viewvc?view=revision&revision=1462268http://svn.apache.org/viewvc?view=revision&revision=1462318http://svn.apache.org/viewvc?view=revision&revision=1462328http://svn.apache.org/viewvc?view=revision&revision=1462488http://svn.apache.org/viewvc?view=revision&revision=1462512http://svn.apache.org/viewvc?view=revision&revision=1462558http://www-01.ibm.com/support/docview.wss?uid=swg1PM86780