Red Hat JBoss Seam InterfaceGenerator Information Disclosure (CVE-2013-6448)

An information disclosure vulnerability exists in Red Hat JBoss Seam Framework. This is due to a design flaw in the InterfaceGenerator handler that allows it to expose details of all classes on the server's classpath. A remote unauthenticated attacker may exploit this vulnerability on a web...

CVE-2013-6448

CVE-2013-6448 affects Red Hat JBoss Web Framework Kit’s Seam Remoting component. The InterfaceGenerator handler exposed details of all classes and methods on the server classpath, enabling a remote attacker to determine which classes are deployed. Red Hat addressed this in the 2.4.0 update (RHSA-...