CVE-2014-4651

Published: Feb 18, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks.

Affected (1)

Products: Apache: Jclouds

Apache

1 product

Jclouds

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Jclouds	From 1.7.3 to 1.8.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://seclists.org/oss-sec/2014/q2/579

Source: secalert@redhat.com

ExploitMailing ListThird Party Advisory

https://issues.apache.org/jira/browse/JCLOUDS-612

Source: secalert@redhat.com

Issue TrackingPatchVendor Advisory

http://seclists.org/oss-sec/2014/q2/579

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing ListThird Party Advisory

https://issues.apache.org/jira/browse/JCLOUDS-612

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.