RCE in Redhat Jboss_bpm_suite
CVE-2013-6468
JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.020 (78.2th percentile) — read the EPSS interpretation.
Affected products
- Redhat Jboss_bpm_suite — versions 6.0.0
- Redhat Jboss_drools
- Redhat Jboss_enterprise_brms_platform — versions 6.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)