CVE-2013-4112

2013-09-2819:55:00

Debian Security Bug Tracker

security-tracker.debian.org

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.09 Low

EPSS

Percentile

94.6%

JSON

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

OSVersionArchitecturePackageVersionFilename
Debian12alllibjgroups-java< 2.12.2.Final-4libjgroups-java_2.12.2.Final-4_all.deb
Debian11alllibjgroups-java< 2.12.2.Final-4libjgroups-java_2.12.2.Final-4_all.deb
Debian10alllibjgroups-java< 2.12.2.Final-4libjgroups-java_2.12.2.Final-4_all.deb
Debian999alllibjgroups-java< 2.12.2.Final-4libjgroups-java_2.12.2.Final-4_all.deb
Debian13alllibjgroups-java< 2.12.2.Final-4libjgroups-java_2.12.2.Final-4_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libjgroups-java	< 2.12.2.Final-4	libjgroups-java_2.12.2.Final-4_all.deb
Debian	11	all	libjgroups-java	< 2.12.2.Final-4	libjgroups-java_2.12.2.Final-4_all.deb
Debian	10	all	libjgroups-java	< 2.12.2.Final-4	libjgroups-java_2.12.2.Final-4_all.deb
Debian	999	all	libjgroups-java	< 2.12.2.Final-4	libjgroups-java_2.12.2.Final-4_all.deb
Debian	13	all	libjgroups-java	< 2.12.2.Final-4	libjgroups-java_2.12.2.Final-4_all.deb