Lucene search
Ubuntu.comUB:CVE-2013-4128HistoryAug 16, 2013 - 12:00 a.m.
CVE-2013-4128
2013-08-1600:00:00
ubuntu.com
ubuntu.com
7
0.007 Low
EPSS
Percentile
80.3%
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly
cache EJB invocations by remote-naming, which allows remote attackers to
hijack sessions by using a remoting client.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | per Debian, only builds a few libraries, not the full application server |
Related
cvelist
cvelist
CVE-2013-4128
2013-08-16 16:00:00
prion
prion
Design/Logic Flaw
2013-08-16 16:55:00
cve
cve
CVE-2013-4128
2013-08-16 16:55:00
veracode
veracode
Session Hijacking
2019-01-15 08:57:33
Weak Authentication
2019-05-02 04:48:27
redhat
redhat
nessus
nessus
Red Hat JBoss Enterprise Application Platform 6.1.0 Security Update (RHSA-2013:1152)
2014-02-03 00:00:00
RHEL 5 / 6 : JBoss EAP (RHSA-2013:1151)
2013-08-13 00:00:00
JBoss Portal 6.1.0 Update (RHSA-2013:1437)
2014-01-31 00:00:00