CVE-2013-4561: redhat openshift Insecure Temporary File
CVSS: 9.1v3.1CriticalModified
Published 30-06-2022Last modified 06-08-2024
Vulnerability summary
CVE-2013-4561 is a critical (CVSS 9.1) Insecure Temporary File vulnerability in redhat openshift. EPSS estimates a 1.43% chance of exploitation in the next 30 days, higher than 72.6% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
9.1/10
010
Critical · v3.1 (NVD)EPSS score
1.43%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 30-06-2022PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
CVSS metrics
2 scores · 1 source · 2 versionsCritical 9.1Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NSourcesSingle source
Medium 6.4Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:NSourcesSingle source
EPSS trend
Probability
1.43%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.43% on 19-09-2026
19-09-202619-10-2026
EPSS score1.43%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-377Insecure Temporary FileCreating and using insecure temporary files can leave application and system data vulnerable to attack.
- CWE-668Exposure of Resource to Wrong SphereThe product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Affected systems
Redhat1 product
1 vendor · 1 product
References
2 links- github.com/openshift/origin-server/commit/f1abe972794e35a4bfba597694ce829990f14d39X Refsource MISCPatchThird Party Advisory