Description

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

Remediation

References

CVE-2013-4213

Related Vulnerabilities

MySQL CVE-2020-14839 Vulnerability (CVE-2020-14839)

Oracle Database Server CVE-2006-3698 Vulnerability (CVE-2006-3698)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-9578)

WordPress Plugin Woo Email Control Cross-Site Scripting (1.01)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.26)

Severity

Medium

Classification

CVE-2013-4213 CWE-284

Tags

Missing Update Known Vulnerabilities