CVEvulnerability
CVE-2013-6448
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via unspecified vectors.
Affected configurations
• redhat jboss seam 2 framework (<= 2.3.1)
• redhat jboss seam 2 framework 2.0.0
• redhat jboss seam 2 framework 2.0.1
• redhat jboss seam 2 framework 2.0.2
• redhat jboss seam 2 framework 2.0.3
• redhat jboss seam 2 framework 2.1.0
• redhat jboss seam 2 framework 2.1.1
• redhat jboss seam 2 framework 2.1.2
• redhat jboss seam 2 framework 2.2.0
• redhat jboss seam 2 framework 2.2.1
• redhat jboss seam 2 framework 2.2.2
• redhat jboss seam 2 framework 2.3.0
• redhat jboss seam 2 framework 2.3.1
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2014-0045.html Vendor Advisory
- http://secunia.com/advisories/56572 Vendor Advisory
- http://www.securitytracker.com/id/1029652 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1044794 Patch, Vendor Advisory
- https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5 github.com
- http://rhn.redhat.com/errata/RHSA-2014-0045.html Vendor Advisory
- http://secunia.com/advisories/56572 Vendor Advisory
- http://www.securitytracker.com/id/1029652 www.securitytracker.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1044794 Patch, Vendor Advisory
- https://github.com/seam2/jboss-seam/commit/090aa6252affc978a96c388e3fc2c1c2688d9bb5 github.com