CVEvulnerability
CVE-2013-0314
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-04-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.
Affected configurations
• redhat jboss enterprise portal platform 5.2.2
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://rhn.redhat.com/errata/RHSA-2013-0613.html Vendor Advisory
- http://secunia.com/advisories/52552 Vendor Advisory
- http://www.osvdb.org/91120 www.osvdb.org
- https://bugzilla.redhat.com/show_bug.cgi?id=913327 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-0613.html Vendor Advisory
- http://secunia.com/advisories/52552 Vendor Advisory
- http://www.osvdb.org/91120 www.osvdb.org
- https://bugzilla.redhat.com/show_bug.cgi?id=913327 bugzilla.redhat.com