CVE-2013-4374

low-risk

Published 2019-11-04

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.

Do I need to act?

0.10% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.1/10 High

LOCAL / LOW complexity

Rhq Mongo Db Drift Server

Jboss Operations Network

Redhat

Vendor Advisory https://access.redhat.com/security/cve/cve-2013-4374

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4374

Vendor Advisory https://access.redhat.com/security/cve/cve-2013-4374

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4374

/ 100

low-risk

Severity 22/34 · High

Exploitability 0/34 · Minimal

Exposure 7/34 · Low