CVEvulnerability
CVE-2013-4213
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-284
Description
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.
Affected configurations
• redhat jboss enterprise application platform 6.1.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://osvdb.org/96216 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2013-1151.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1152.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1437.html Vendor Advisory
- http://secunia.com/advisories/54508 secunia.com
- http://www.securitytracker.com/id/1028898 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=985359 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86387 exchange.xforce.ibmcloud.com
- http://osvdb.org/96216 osvdb.org
- http://rhn.redhat.com/errata/RHSA-2013-1151.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1152.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1437.html Vendor Advisory
- http://secunia.com/advisories/54508 secunia.com
- http://www.securitytracker.com/id/1028898 Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=985359 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86387 exchange.xforce.ibmcloud.com