CVE-2013-2133

CVE-2013-2133 describes a vulnerability in the EJB invocation handler of Red Hat JBossWS, affecting JBoss Enterprise Application Platform (EAP) before version 6.2.0. This flaw allows remote authenticated users to bypass method-level restrictions on JAX-WS Service endpoints, gaining unauthorized access to restricted JAX-WS handlers by leveraging existing EJB class permissions. With a CVSS score of 5.5, this vulnerability has a network attack vector, low attack complexity, and could lead to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.