GCVE-110-CERTCC-2013-436214

Advisory PublishedCVSS 9.3/10

Vulnetix · Advisory published November 4, 2013

The Attachmate Verastream Host Integrator (VHI) is vulnerable to arbitrary file uploads and execution.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.3/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact4d1_population1d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.5remediation_levelTFreport_confidenceCenvironmental_score1.8897647328target_distributionLenvironmental_vectorCDP:N/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2013-3626

Transitive aliases

GSD-2013-3626 GHSA-32f3-6f6j-9xc3

References

Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution

url

Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution

url

Attachmate Verastream Host Integrator (VHI) allows arbitrary file upload and execution

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON