Jboss EAP Configuration Vulnerability - CVE-2013-4128 - Vulnerability Database

Jboss EAP Configuration Vulnerability - CVE-2013-4128

Medium

Reference: CVE-2013-4128

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-4128

Title: Jboss EAP Configuration Vulnerability

Overview:

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming which allows remote attackers to hijack sessions by using a remoting client.