CVE-2013-4128

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.

Date published : 2013-08-16

https://bugzilla.redhat.com/show_bug.cgi?id=984795

http://osvdb.org/96217