CVE-2013-4112

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Score
CVSS 2.0 5.4 Medium
Status
Modified - secalert@redhat.com
Published
2013-09-28
Last modified
2024-08-06
Weaknesses
CWE-200

Affected products

References

 
 
© AVABIS GmbH privacypolicy about