VDB
RHSA-2013%3A1771
RHSA-2013%3A1771
PUBLISHED
CVSS 3.299999952316284 LOW
The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
Risk Scores
CVSS 2.0
3.299999952316284
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Web Framework Kit 2.4 |
Timeline
- Nov 27, 2013 CVE Published
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2013:1771 advisory
- https://access.redhat.com/security/updates/classification/#low advisory
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=web.framework.kit&downloadType=distributions advisory
- https://access.redhat.com/site/documentation/Red_Hat_JBoss_Web_Framework_Kit/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=983489 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1771.json advisory
- https://access.redhat.com/security/cve/CVE-2013-4112 advisory
- https://www.cve.org/CVERecord?id=CVE-2013-4112 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2013-4112 advisory