VULNERABILITY INTELLIGENCE

CVE-2013-2102

CVSS score3.3 LOW
EPSS probability0.98%
CISA KEVNot currently listed
Published2013-10-28
Last modified2026-06-16
CVSS vectorAV:A/AC:L/Au:N/C:P/I:N/A:N

Description

The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtain sensitive information (diagnostics) by accessing the service.

Weakness classification

  • CWE-287: Improper Authentication

Primary references