Description

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Remediation

References

CVE-2013-4112

Related Vulnerabilities

Drupal Core 7.x SQL Injection (7.0 - 7.31)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2559)

WordPress Plugin Shopp Multiple Vulnerabilities (1.0.17)

Jenkins Insufficient Verification of Data Authenticity Vulnerability (CVE-2015-7539)

XWikiplatform Missing Authorization Vulnerability (CVE-2024-37898)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2013-4112