PT-2014-3121
CVE-2013-6448
·
تاريخ النشر
2014-01-23
·
تاريخ التحديث
2014-01-23
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
JBoss Seam 2 framework versions 2.3.1 and earlier
Description
The issue allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath.
Recommendations
For JBoss Seam 2 framework versions 2.3.1 and earlier, consider restricting access to the InterfaceGenerator handler as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾