What is the CVSS score of CVE-2013-2217?

CVE-2013-2217 has a CVSS 2.0 base score of 1.2 (Low). CVSS vector: AV:L/AC:H/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2013-2217?

Yes, a patch is available for CVE-2013-2217. Update the affected software to the latest version immediately.

Suds CVE-2013-2217

LOW

Improper Link Resolution Before File Access (CWE-59)

2013-09-23 secalert@redhat.com

Information Disclosure Suds Opensuse Enterprise Linux

1.2

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.2 LOW

AV:L/AC:H/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:H/Au:N/C:N/I:P/A:N

Attack Vector

Local

Attack Complexity

High

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Sep 23, 2013 - 20:55 cve.org

LOW 1.2

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

8 pypi packages depend on suds-py3 (2 direct, 6 indirect)

Ecosystem-wide dependent count for version 1.4.4.1.

DescriptionCVE.org

cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-59. cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. Affected products include: Jeff Ortel Suds, Opensuse, Redhat Enterprise Linux.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.