CVE-2013-4213

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
redhatjboss_enterprise_application_platform
6.1.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
jbossas4
raring
not-affected
quantal
not-affected
precise
not-affected
lucid
not-affected
Common Weakness Enumeration
References
http://osvdb.org/96216
http://rhn.redhat.com/errata/RHSA-2013-1151.html
http://rhn.redhat.com/errata/RHSA-2013-1152.html
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://secunia.com/advisories/54508
http://www.securitytracker.com/id/1028898
https://bugzilla.redhat.com/show_bug.cgi?id=985359
https://exchange.xforce.ibmcloud.com/vulnerabilities/86387
http://osvdb.org/96216
http://rhn.redhat.com/errata/RHSA-2013-1151.html
http://rhn.redhat.com/errata/RHSA-2013-1152.html
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://secunia.com/advisories/54508
http://www.securitytracker.com/id/1028898
https://bugzilla.redhat.com/show_bug.cgi?id=985359
https://exchange.xforce.ibmcloud.com/vulnerabilities/86387