Description

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

Remediation

References

CVE-2013-4213

Related Vulnerabilities

Drupal Other Vulnerability (CVE-2005-3975)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6288)

WordPress Plugin iFrame Admin Pages 'url' Parameter Cross-Site Scripting (0.1)

WordPress Plugin Bulk Add to Cart for WooCommerce Security Bypass (1.2.2)

Oracle JRE CVE-2023-21938 Vulnerability (CVE-2023-21938)

Severity

Medium

Classification

CVE-2013-4213 CWE-284

Tags

Missing Update Known Vulnerabilities