CVE-2013-6448
Summary
| CVE | CVE-2013-6448 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-01-23 00:55:00 UTC |
| Updated | 2014-01-23 18:17:00 UTC |
| Description | The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via unspecified vectors. |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | beta1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | cr3 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.1 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.1 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | sp1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.3 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | alpha1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | beta1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | sp1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.1 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.1 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.2 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.2 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.2 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.0 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | cr3 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.2 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | alpha | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | beta1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | beta2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | beta1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | cr3 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.0 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.1 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.1 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.2 | sp1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.0.3 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | alpha1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | beta1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.0 | sp1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.1 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.1 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.2 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.2 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.1.2 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.0 | ga | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | cr2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.1 | cr3 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.2.2 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | All | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | alpha | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | beta1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | beta2 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.0 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | 2.3.1 | cr1 | All | All |
| Application | Redhat | Jboss Seam 2 Framework | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JBoss Web Framework Kit Lets Remote Users Obtain Potentially Sensitive Information - SecurityTracker | SECTRACK | www.securitytracker.com | |
| 1044794 – (CVE-2013-6448) CVE-2013-6448 JBoss Seam: Information disclosure in remoting | CONFIRM | bugzilla.redhat.com | Patch, Vendor Advisory |
| About Secunia Research | Flexera | SECUNIA | secunia.com | Vendor Advisory |
| https://issues.jboss.org/browse/WFK2-375 enhanced fix · seam2/jboss-seam@090aa62 · GitHub | CONFIRM | github.com | |
| Red Hat Customer Portal | REDHAT | rhn.redhat.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.