CVE-2013-4213

Publication date 16 August 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.

Read the notes from the security team

Status

Package Ubuntu Release Status
jbossas4 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid
Not affected

Notes

jdstrand

per Debian, only builds a few libraries, not the full application server