CVE-2013-4213

Description

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/86387

https://bugzilla.redhat.com/show_bug.cgi?id=985359

http://www.securitytracker.com/id/1028898

http://secunia.com/advisories/54508

http://rhn.redhat.com/errata/RHSA-2013-1437.html

http://rhn.redhat.com/errata/RHSA-2013-1152.html

http://rhn.redhat.com/errata/RHSA-2013-1151.html

http://osvdb.org/96216

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3