CVE-2013-2133: redhat enterprise_linux
Vulnerability summary
CVE-2013-2133 is a medium (CVSS 5.5) vulnerability in redhat enterprise_linux. EPSS estimates a 1.81% chance of exploitation in the next 30 days, higher than 78.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 06-12-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.81%
Chance of exploitation in the next 30 days
Percentile
78%
Versus all other CVEs
30-day change
0.00 pp
From 1.81% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat2 products
- enterprise_linuxEOL5 | 6.0
- jboss_enterprise_application_platform≤ 6.1.0 | 4.2.0 | 4.2.0:cp09 | 4.3.0 | 4.3.0:cp10 | 5.0.0 | 5.0.1 | 5.1.0 | 5.1.1 | 5.1.2 | 5.2.0 | 5.2.1 | 5.2.2 | 6.0.0 | 6.0.1
1 vendor · 2 products