CVE-2013-1768

Published: Jul 11, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.

Affected (15)

Products: Apache: Openjpa

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Apache Openjpa	Version 1.0.0
Apache Openjpa	Version 1.0.1
Apache Openjpa	Version 1.0.2
Apache Openjpa	Version 1.0.3
Apache Openjpa	Version 1.0.4
Apache Openjpa	Version 1.1.0
Apache Openjpa	Version 1.2.0
Apache Openjpa	Version 1.2.1
Apache Openjpa	Version 1.2.2
Apache Openjpa	Version 2.0.0
Apache Openjpa	Version 2.0.1
Apache Openjpa	Version 2.1.0
Apache Openjpa	Version 2.1.1
Apache Openjpa	Version 2.2.0
Apache Openjpa	Version 2.2.1

Related CWEs

References (38)

http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0099.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1862.html

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462076

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462225

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462268

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462318

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462328

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462488

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462512

Source: secalert@redhat.com

http://svn.apache.org/viewvc?view=revision&revision=1462558

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86780

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86786

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86788

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86791

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21635999

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21644047

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/60534

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/82268

Source: secalert@redhat.com

http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0099.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1862.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462076

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462225

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462268

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462318

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462328

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462488

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462512

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.apache.org/viewvc?view=revision&revision=1462558

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86780

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86786

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86788

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg1PM86791

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21635999

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21644047

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/60534

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/82268

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.