CVE-2013-4112
UnknownEPSS 1.61%
Last modified
CVE-2013-4112 is a vulnerability of currently unknown severity. The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.. EPSS estimates a 1.61% chance of exploitation in the next 30 days.
Description
The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Jgroups | Jgroup | 3.0.0 |
| Jgroups | Jgroup | 3.0.1 |
| Jgroups | Jgroup | 3.0.2 |
| Jgroups | Jgroup | 3.0.3 |
| Jgroups | Jgroup | 3.0.4 |
| Jgroups | Jgroup | 3.0.5 |
| Jgroups | Jgroup | 3.0.6 |
| Jgroups | Jgroup | 3.0.7 |
| Jgroups | Jgroup | 3.0.8 |
| Jgroups | Jgroup | 3.0.9 |
| Jgroups | Jgroup | 3.0.10 |
| Jgroups | Jgroup | 3.0.11 |
| Jgroups | Jgroup | 3.0.12 |
| Jgroups | Jgroup | 3.0.13 |
| Jgroups | Jgroup | 3.0.14 |
| Jgroups | Jgroup | 3.1.0 |
| Jgroups | Jgroup | 3.2.0 |
| Jgroups | Jgroup | 3.2.1 |
| Jgroups | Jgroup | 3.2.2 |
| Jgroups | Jgroup | 3.2.3 |
| Jgroups | Jgroup | 3.2.4 |
| Jgroups | Jgroup | 3.2.5 |
| Jgroups | Jgroup | 3.2.6 |
| Jgroups | Jgroup | 3.2.7 |
| Jgroups | Jgroup | 3.2.8 |
| Jgroups | Jgroup | 3.3.0 |
| Jgroups | Jgroup | 3.3.1 |
| Jgroups | Jgroup | 3.3.2 |
| Redhat | Jboss Enterprise Application Platform | 6.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4112?
The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
How severe is CVE-2013-4112?
Severity scoring for CVE-2013-4112 is pending analysis. The EPSS model estimates a 1.61% probability of exploitation in the next 30 days.
How do I fix CVE-2013-4112?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4106A Cross-site scripting (XSS) vulnerability exists in Convers…6.1
- CVE-2013-4107Cryptocat before 2.0.22: cryptocat.js handlePresence() has c…6.1
- CVE-2013-4108Multiple unspecified vulnerabilities in Cryptocat Project Cr…9.8
- CVE-2013-4109An unspecified cross-site scripting (XSS) vulnerability exis…6.1
- CVE-2013-4110Cryptocat has an Unspecified Chat Participant User List Disc…5.3
- CVE-2013-4111The Python client library for Glance (python-glanceclient) b…
- CVE-2013-4113ext/xml/xml.c in PHP before 5.3.27 does not properly conside…
- CVE-2013-4114The automatic update request in Nagstamont before 0.9.10 use…
- CVE-2013-4115Buffer overflow in the idnsALookup function in dns_internal.…
- CVE-2013-4116lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allow…
- CVE-2013-4117Cross-site scripting (XSS) vulnerability in includes/CatGrid…
- CVE-2013-4118FreeRDP before 1.1.0-beta1 allows remote attackers to cause …
Are you affected by CVE-2013-4112?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST