CVE-2013-4213: Medium severity jboss enterprise application platform vulnerability
A flaw was discovered in the way connections for remote EJB invocations via the EJB client API were cached on the server. A remote attacker could exploit this flaw by using an EJB client to get a previously authenticated connection.
Other sources
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4213?
CVE-2013-4213 is classified as a medium severity vulnerability.
How do I fix CVE-2013-4213?
To fix CVE-2013-4213, upgrade to Red Hat JBoss Enterprise Application Platform version 6.1.1 or later.
What products are affected by CVE-2013-4213?
CVE-2013-4213 affects Red Hat JBoss Enterprise Application Platform version 6.1.0.
Can CVE-2013-4213 be exploited remotely?
Yes, CVE-2013-4213 can be exploited remotely by an attacker using an EJB client.
What does CVE-2013-4213 allow an attacker to do?
CVE-2013-4213 allows an attacker to obtain a previously authenticated connection through flawed caching.