CVE-2013-4112

Published: Sep 28, 2013Modified: Apr 29, 2026

5.4

Vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 5.5 / Impact: 6.4

Source: NVD

Description

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Affected (29)

Products: Jgroups: Jgroup · Redhat: Jboss Enterprise Application Platform

Jgroups

1 product

Jgroup

Redhat

1 product

Jboss Enterprise Application Platform

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Jgroups Jgroup	Version 3.0.0
Jgroups Jgroup	Version 3.0.10
Jgroups Jgroup	Version 3.0.11
Jgroups Jgroup	Version 3.0.12
Jgroups Jgroup	Version 3.0.13
Jgroups Jgroup	Version 3.0.14
Jgroups Jgroup	Version 3.0.1
Jgroups Jgroup	Version 3.0.2
Jgroups Jgroup	Version 3.0.3
Jgroups Jgroup	Version 3.0.4
Jgroups Jgroup	Version 3.0.5
Jgroups Jgroup	Version 3.0.6
Jgroups Jgroup	Version 3.0.7
Jgroups Jgroup	Version 3.0.8
Jgroups Jgroup	Version 3.0.9
Jgroups Jgroup	Version 3.1.0
Jgroups Jgroup	Version 3.2.0
Jgroups Jgroup	Version 3.2.1
Jgroups Jgroup	Version 3.2.2
Jgroups Jgroup	Version 3.2.3
Jgroups Jgroup	Version 3.2.4
Jgroups Jgroup	Version 3.2.5
Jgroups Jgroup	Version 3.2.6
Jgroups Jgroup	Version 3.2.7
Jgroups Jgroup	Version 3.2.8
Jgroups Jgroup	Version 3.3.0
Jgroups Jgroup	Version 3.3.1
Jgroups Jgroup	Version 3.3.2