CVE-2013-4128

Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.

• CWE-16

• http://osvdb.org/96217
• http://rhn.redhat.com/errata/RHSA-2013-1151.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1152.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1437.html
• http://secunia.com/advisories/54508Vendor Advisory
• http://www.securitytracker.com/id/1028898
• https://bugzilla.redhat.com/show_bug.cgi?id=984795
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86386
• http://osvdb.org/96217
• http://rhn.redhat.com/errata/RHSA-2013-1151.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1152.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1437.html
• http://secunia.com/advisories/54508Vendor Advisory
• http://www.securitytracker.com/id/1028898
• https://bugzilla.redhat.com/show_bug.cgi?id=984795
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86386

Published

Aug 16, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4122Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly han…
• CVE-2013-4123client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.…
• CVE-2013-4124Integer overflow in the read_nttrans_ea_list function in ntt…
• CVE-2013-4125The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the I…
• CVE-2013-4126Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4127Use-after-free vulnerability in the vhost_net_set_backend fu…
• CVE-2013-4129The bridge multicast implementation in the Linux kernel thro…
• CVE-2013-4130The (1) red_channel_pipes_add_type and (2) red_channel_pipes…
• CVE-2013-4131The mod_dav_svn Apache HTTPD server module in Subversion 1.7…
• CVE-2013-4132KDE-Workspace 4.10.5 and earlier does not properly handle th…
• CVE-2013-4133kde-workspace before 4.10.5 has a memory leak in plasma desk…7.5
• CVE-2013-4134OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before …