NVD

Id
37919  
Name
CVE-2013-1768  
Description
The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-07-11  
Modified Date
2014-01-03  
Seq
2013-1768  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193510 37919 CVE-2013-1768 20130612 [CVE-2013-1768] Apache OpenJPA security vulnerability  View
193511 37919 CVE-2013-1768 RHSA-2013:1862  View
193512 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462076  View
193513 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462225  View
193514 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462268  View
193515 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462318  View
193516 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462328  View
193517 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462488  View
193518 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462512  View
193519 37919 CVE-2013-1768 http://svn.apache.org/viewvc?view=revision&revision=1462558  View
193520 37919 CVE-2013-1768 PM86780  View
193521 37919 CVE-2013-1768 PM86786  View
193522 37919 CVE-2013-1768 PM86788  View
193523 37919 CVE-2013-1768 PM86791  View
193524 37919 CVE-2013-1768 http://www-01.ibm.com/support/docview.wss?uid=swg21635999  View
193525 37919 CVE-2013-1768 http://www-01.ibm.com/support/docview.wss?uid=swg21644047  View
193526 37919 CVE-2013-1768 openjpa-cve20131768-command-execution(82268)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21762 JVNDB-2013-003337 Apache OpenJPA の BrokerFactory 機能における任意のコードを実行される脆弱性 Apache OpenJPA の BrokerFactory 機能は、特定の巧妙に細工された OpenJPA オブジェクトの非シリアル化中に、ログトレースデータを含むローカルで実行可能な JSP ファイルを作成するため、任意のコードを実行される脆弱性があります。 CVE-2013-1768 61710 CVE-2013-1768 37919 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003337.html 2013-03-28 2014-02-20 View