Read the docs
Red Hat Security Advisory

RHSA-2013:1771

Red Hat JBoss Web Framework Kit 2.4.0 update

Released 2013-11-27 · Red Hat rating Low · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 28

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid crede…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.01607 Published 2013-09-28 Fixed in 3.2.9.Final, 3.3.3.Final CWE-200