VulnerabilityModified

CVE-2013-6469

JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression.

MEDIUM 6.5EPSS 1.65%

Does this matter?

Lower severity and a low EPSS score (1.65%). Track it; it rarely justifies an emergency change on its own.

Description

JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these details are obtained from third party information.

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 1.65% probability · 75th percentile
CISA KEV: Not listed
Weakness: CWE-94
Affected: redhat/jboss fuse service works · redhat/jboss overlord run time governance
Source: secalert@redhat.com

References

http://secunia.com/advisories/57843Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1051279
http://secunia.com/advisories/57843Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1051279

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.