CVE-2013-4128 in Red Hat JBoss Enterprise Application Platform
Summary
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.
Reservation
06/12/2013
Disclosure
08/16/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9958 | Red Hat JBoss Enterprise Application Platform Remote-Naming Connection Cache config | 16 | Unproven | Official fix | CVE-2013-4128 |