CVE-2013-4112
The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jgroups:jgroup
- redhat:jboss_enterprise_application_platform
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cc62-496p-hrr7 | Maven | org.jgroups:jgroups | >=3.0.0 <3.2.9.Final | 3.2.9.Final |
| GHSA-cc62-496p-hrr7 | Maven | org.jgroups:jgroups | >=3.3.0 <3.3.3.Final | 3.3.3.Final |