GCVE-110-CERTCC-2012-309979

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published July 13, 2012

Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application.

Download JSON Open in Console

Risk Scores

CVSS 2.0

7.5/10

High · AV:N/AC:L/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score5remediation_levelOFreport_confidenceUCenvironmental_score1.4target_distributionLenvironmental_vectorCDP:L/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-2967 CVE-2012-2968 CVE-2012-2966 CVE-2012-2969 CVE-2012-2965

Transitive aliases

GHSA-p332-fw36-4hqx GSD-2012-2968 GSD-2012-2969 GHSA-2qr7-8fp8-4xxr GSD-2012-2965 GSD-2012-2966 GHSA-g5fx-ccwv-5c4f GSD-2012-2967 GHSA-6h2p-2f7r-xq55 GHSA-g5gf-7g7g-9xv6

References

Caucho's Quercus on Resin contains multiple vulnerabilities

url

Caucho's Quercus on Resin contains multiple vulnerabilities

url

Caucho's Quercus on Resin contains multiple vulnerabilities

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON