NetSight
IP …
medium5.4

CVE-2013-4112

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic i…

Impact

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Affected products

VendorProductAffected versions
JgroupsJgroup
Versions 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5
RedhatJboss Enterprise Application Platform
Version 6.1.0

Weakness classification

CWE-200

References