Description

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

Remediation

References

CVE-2013-4213

Related Vulnerabilities

SharePoint CVE-2021-26420 Vulnerability (CVE-2021-26420)

Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17917)

concrete5 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11476)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Multiple Vulnerabilities (2.05.01)

Ruby Improper Authentication Vulnerability (CVE-2008-3905)

Severity

Medium

Classification

CVE-2013-4213 CWE-284

Tags

Missing Update Known Vulnerabilities