Description
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple Business Directory with Maps PHP Object Injection (3.6.0)
WordPress Plugin Contest Gallery-Photo Contest for WordPress Cross-Site Scripting (13.1.0.9)
WordPress 4.9.x Cross-Site Request Forgery (4.9 - 4.9.9)
WordPress Plugin Hover Effects Builder Free Cross-Site Scripting (1.0.3)
WordPress Plugin Anti-Malware Security and Brute-Force Firewall Local File Inclusion (4.18.63)