CVE-2013-2133: The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) bef

CVE-2013-2133 is a security flaw in Red Hat JBossWS (a tool for building web services) used in JBoss Enterprise Application Platform (EAP) before version 6.2.0, where the EJB invocation handler (the component that processes method calls) fails to properly check access restrictions. This allows remote authenticated users (people with login credentials) to bypass security controls and access JAX-WS handlers (special functions that intercept web service requests) that should be restricted, simply by having permission to use the underlying EJB class.