CVE-2013-2068

CVE-2013-2068 describes multiple directory traversal vulnerabilities in the AgentController of Red Hat CloudForms Management Engine 2.0. This flaw allows unauthenticated remote attackers to create or overwrite arbitrary files on the system by injecting directory traversal sequences (../) into the filename parameter of the log, upload, or linuxpkgs methods. The vulnerability has a critical CVSS score of 9.4, indicating high severity due to its network-based attack vector, low attack complexity, and complete compromise of integrity and availability. Its high EPSS and FAUCET Risk Scores further emphasize its significant potential impact. While not listed on the CISA KEV catalog, exploit intelligence confirms the existence of a Metasploit module and an ExploitDB entry for this vulnerability, demonstrating readily available exploit code. Despite this, there is no recorded community discussion or media coverage, suggesting limited public awareness or active exploitation in the wild.