Description

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.

Remediation

References

CVE-2013-4128

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1880)

Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2022-26148)

WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)

WordPress Plugin Random image gallery with pretty photo zoom Cross-Site Scripting (7.4)

WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (2.0.2)

Severity

Medium

Classification

CVE-2013-4128

Tags

Missing Update Known Vulnerabilities