Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4213
HistoryAug 16, 2013 - 12:00 a.m.

CVE-2013-4213

2013-08-1600:00:00
ubuntu.com
ubuntu.com
11

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.007 Low

EPSS

Percentile

80.6%

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly
cache EJB invocations by the EJB client API, which allows remote attackers
to hijack sessions by using an EJB client.

Bugs

Notes

Author Note
jdstrand per Debian, only builds a few libraries, not the full application server

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.007 Low

EPSS

Percentile

80.6%