CVE-2013-4128: Medium severity redhat JBoss Enterprise Application Platform vulnerability
A flaw was discovered in the way connections for remote EJB invocations via the remote-naming project were cached on the server. A remote attacker could exploit this flaw by using an EJB client to get a previously authenticated connection.
Other sources
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4128?
CVE-2013-4128 is classified as a moderate severity vulnerability.
How do I fix CVE-2013-4128?
Fix CVE-2013-4128 by updating Red Hat JBoss Enterprise Application Platform to the latest version that addresses this vulnerability.
Who is affected by CVE-2013-4128?
CVE-2013-4128 affects users of Red Hat JBoss Enterprise Application Platform version 6.1.0.
What type of attack does CVE-2013-4128 enable?
CVE-2013-4128 allows a remote attacker to exploit a flaw in connection caching for remote EJB invocations.
What is the main issue caused by CVE-2013-4128?
CVE-2013-4128 allows an attacker to obtain a previously authenticated connection via an EJB client.