Description
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://rhn.redhat.com/errata/RHSA-2013-1152.html ↗
- http://osvdb.org/96217 ↗
- http://secunia.com/advisories/54508 ↗
- http://rhn.redhat.com/errata/RHSA-2013-1437.html ↗
- http://www.securitytracker.com/id/1028898 ↗
- http://rhn.redhat.com/errata/RHSA-2013-1151.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86386 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=984795 ↗