CVE-2014-4651 It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or p...
CriticalCVSS 9.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache jclouds | >= 1.7.3, < 1.8.0 | 1.8.0 |
| Apache jclouds | = Apache jclouds before 1.8.0 | No fix listed |
References
- seclists.org exploit mailing-list third-party-advisory
- issues.apache.org issue-tracking patch vendor-advisory