Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 16/07/2015 Updated: 28/11/2016

CVSS v2 Base Score: 4.9 | Impact Score: 4.9 | Exploitability Score: 6.8

VMScore: 436

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N

Subscribe to Jboss Enterprise Portal Platform

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote malicious users to obtain sensitive information via a URL with a modified resource ID.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss enterprise portal platform 6.2.0

It was found that JavaServer Faces PortletBridge-based portlets using GenericPortlet's default resource serving did not restrict access to resources within the web application An attacker could set the resource ID field of a URL to potentially bypass security constraints and gain access to restricted resources ...

CWE-264 https://bugzilla.redhat.com/show_bug.cgi?id=1232908 http://rhn.redhat.com/errata/RHSA-2015-1226.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securityfocus.com/bid/75941 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-3244

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-3244

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect