CVE-2013-2102

Severity: low (CVSS 3.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-28 · updated 2026-06-16
Weakness: CWE-287

Description

The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtain sensitive information (diagnostics) by accessing the service.

Affected products

RedHat Jboss Enterprise Portal Platform: through 6.0.0; 4.3.0, 5.0.0, 5.0.1, 5.1.0, 5.1.1, 5.2.0 (+2)

References

http://rhn.redhat.com/errata/RHSA-2013-1437.html
https://bugzilla.redhat.com/show_bug.cgi?id=963984
http://rhn.redhat.com/errata/RHSA-2013-1437.html
https://bugzilla.redhat.com/show_bug.cgi?id=963984

Get alerted when CVE-2013-2102 or the next vulnerability affects your stack