NVD

Id
38263  
Name
CVE-2013-2165  
Description
ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-06-18  
Published
2013-07-23  
Modified Date
2017-06-12  
Seq
2013-2165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195663 38263 CVE-2013-2165 JVN#38787103  View
195664 38263 CVE-2013-2165 JVNDB-2013-000072  View
195665 38263 CVE-2013-2165 RHSA-2013:1041  View
195666 38263 CVE-2013-2165 RHSA-2013:1042  View
195667 38263 CVE-2013-2165 RHSA-2013:1043  View
195668 38263 CVE-2013-2165 RHSA-2013:1044  View
195669 38263 CVE-2013-2165 RHSA-2013:1045  View
195670 38263 CVE-2013-2165 https://access.redhat.com/security/cve/CVE-2013-2165  View
195671 38263 CVE-2013-2165 https://bugzilla.redhat.com/show_bug.cgi?id=973570  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19377 JVNDB-2013-000072 JBoss RichFaces において任意のコードが実行される脆弱性 JBoss RichFaces には、deserialize の処理に問題があり、任意のコードが実行される脆弱性が存在します。 CVE-2013-2165 62107 CVE-2013-2165 38263 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000072.html 2013-07-19 2013-07-24 View