Loading...
Loading...
The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.
December 6, 2013
April 29, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2013-2133
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.