6.4
CVE-2013-4128
- EPSS 2.44%
- Veröffentlicht 16.08.2013 16:55:03
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginRed Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Jboss Enterprise Application Platform Version6.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.44% | 0.822 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:P/A:N
|
http://rhn.redhat.com/errata/RHSA-2013-1437.html
http://osvdb.org/96217
http://rhn.redhat.com/errata/RHSA-2013-1151.html
http://rhn.redhat.com/errata/RHSA-2013-1152.html
http://secunia.com/advisories/54508
http://www.securitytracker.com/id/1028898
https://bugzilla.redhat.com/show_bug.cgi?id=984795
https://exchange.xforce.ibmcloud.com/vulnerabilities/86386