CVE-2013-4452

Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication credentials and other unspecified sensitive information by reading these files.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://rhn.redhat.com/errata/RHSA-2013-1762.html	Vendor Advisory
http://secunia.com/advisories/55852	Vendor Advisory
http://www.securityfocus.com/bid/63916
http://www.securitytracker.com/id/1029390
http://rhn.redhat.com/errata/RHSA-2013-1762.html	Vendor Advisory
http://secunia.com/advisories/55852	Vendor Advisory
http://www.securityfocus.com/bid/63916
http://www.securitytracker.com/id/1029390

Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:jboss_operations_network:3.1.2:*:*:*:*:*:*:*

History

21 Nov 2024, 01:55

Type	Values Removed	Values Added
References	~~() http://rhn.redhat.com/errata/RHSA-2013-1762.html - Vendor Advisory~~	() http://rhn.redhat.com/errata/RHSA-2013-1762.html - Vendor Advisory
References	~~() http://secunia.com/advisories/55852 - Vendor Advisory~~	() http://secunia.com/advisories/55852 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/63916 -~~	() http://www.securityfocus.com/bid/63916 -
References	~~() http://www.securitytracker.com/id/1029390 -~~	() http://www.securitytracker.com/id/1029390 -

Information

Published : 2013-12-24 19:55

Updated : 2024-11-21 01:55

NVD link : CVE-2013-4452

Mitre link : CVE-2013-4452

CVE.ORG link : CVE-2013-4452

JSON object : View

Products Affected

redhat

jboss_operations_network

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2013-4452", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-12-24T19:55:07.130", "references": [{"url": "http://rhn.redhat.com/errata/RHSA-2013-1762.html", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/55852", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/63916", "source": "secalert@redhat.com"}, {"url": "http://www.securitytracker.com/id/1029390", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-1762.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/55852", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/63916", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1029390", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication credentials and other unspecified sensitive information by reading these files."}, {"lang": "es", "value": "Red Hat JBoss Operations Network 3.1.2 utiliza permisos de lectura globales para ficheros de configuraci\u00f3n de (1) servidor y (2) agente, lo cual permite a usuarios locales obtener credenciales de autenticaci\u00f3n y otra informaci\u00f3n sensible no especificada mediante la lectura de dichos ficheros."}], "lastModified": "2024-11-21T01:55:35.820", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:jboss_operations_network:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F57B34F5-66CD-4051-8406-54709C39572F"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}