CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2133

The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.3%

CVSS Severity

CVSS v2 Score 5.5

References

Products affected by CVE-2013-2133

Redhat » Jboss Enterprise Application Platform » Version: N/A

cpe:2.3:a:redhat:jboss_enterprise_application_platform:-
Redhat » Jboss Enterprise Application Platform » Version: 4.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.0.0
Redhat » Jboss Enterprise Application Platform » Version: 4.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.2.0
Redhat » Jboss Enterprise Application Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0
Redhat » Jboss Enterprise Application Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.0
Redhat » Jboss Enterprise Application Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.1
Redhat » Jboss Enterprise Application Platform » Version: 5.0.3

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.0.3
Redhat » Jboss Enterprise Application Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.0
Redhat » Jboss Enterprise Application Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1
Redhat » Jboss Enterprise Application Platform » Version: 5.1.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.2
Redhat » Jboss Enterprise Application Platform » Version: 5.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2
Redhat » Jboss Enterprise Application Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0
Redhat » Jboss Enterprise Application Platform » Version: 5.2.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.1
Redhat » Jboss Enterprise Application Platform » Version: 5.2.2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.2
Redhat » Jboss Enterprise Application Platform » Version: 6

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0
Redhat » Jboss Enterprise Application Platform » Version: 6.0.1

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1
Redhat » Jboss Enterprise Application Platform » Version: 6.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.1.0
Redhat » Enterprise Linux » Version: 5

cpe:2.3:o:redhat:enterprise_linux:5
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-2133

Products

Pricing

Contact Us