CVE-2013-4213

Опубликовано: 16 авг. 2013

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

Ссылки

http://osvdb.org/96216
http://rhn.redhat.com/errata/RHSA-2013-1151.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1152.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1437.html
Vendor Advisory
http://secunia.com/advisories/54508
http://www.securitytracker.com/id/1028898
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=985359
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/86387
http://osvdb.org/96216
http://rhn.redhat.com/errata/RHSA-2013-1151.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1152.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-1437.html
Vendor Advisory
http://secunia.com/advisories/54508
http://www.securitytracker.com/id/1028898
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=985359
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/86387

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02473

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2013-4213

ubuntu

почти 13 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

CVE-2013-4213

redhat

около 13 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

CVE-2013-4213

debian

почти 13 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not pro ...

GHSA-36g9-q537-hg7w

github

около 4 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

EPSS

Процентиль: 83%

0.02473

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-284