CVE-2012-4529 Information disclosure in n/a
Remote attackers can steal session IDs via MITM or logs when JBoss Web uses cookie tracking mode, enabling session hijacking.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-4529?
CVE-2012-4529 is a medium-severity vulnerability in Redhat Jboss Enterprise Application Platform, published on 28 Oct 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
Which versions are affected by CVE-2012-4529?
It affects 2 products.
Products include Redhat Jboss Community Application Server, Redhat Jboss Enterprise Application Platform.
How do I fix CVE-2012-4529?
Upgrade to a fixed version.
Is CVE-2012-4529 being exploited?
There is no known exploitation of CVE-2012-4529 in the wild and no public exploit code.
Other vulnerabilities in Redhat Jboss Enterprise Application Platform
All Redhat Jboss Enterprise Application Platform vulnerabilities
Sources
Also known as GHSA-jfrq-h23h-p4q6.