CVE-2013-4213 in JBoss Enterprise Application Platform
Summary
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/12/2013
Disclosure
08/16/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9957 | Red Hat JBoss Enterprise Application Platform Remote EJB Invocation Connection Cache config | 16 | Unproven | Official fix | CVE-2013-4213 |