What is RHSA-2013:1152?

RHSA-2013:1152 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.0 security update

Which CVE IDs does RHSA-2013:1152 cover?

RHSA-2013:1152 covers the following CVE IDs: CVE-2013-4128, CVE-2013-4213. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2013:1152?

RHSA-2013:1152 affects 1 product, including: Red Hat JBoss Enterprise Application Platform 6.1.

RHSA-2013:1152High

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.0 security update

Vendor

Red Hat Product Security

Published

August 12, 2013

Last Modified

January 28, 2026

🔗 CVE IDs covered (2)

CVE-2013-4128 →CVE-2013-4213 →

📋 Description

CVE-2013-4128 — remote-naming: Session fixation due improper connection caching CVE-2013-4213 — ejb-client: Session fixation due improper connection caching

🎯 Affected products1

Red Hat JBoss Enterprise Application Platform 6.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The JBoss server process must be restarted for the update to take effect.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2013:1152
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.1.0
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=984795
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=985359
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1152.json