PT-2014-3121
CVE-2013-6448
·
Published
2014-01-23
·
Updated
2014-01-23
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
JBoss Seam 2 framework versions 2.3.1 and earlier
Description
The issue allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath.
Recommendations
For JBoss Seam 2 framework versions 2.3.1 and earlier, consider restricting access to the InterfaceGenerator handler as a temporary workaround until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾