CVEvulnerability
CVE-2015-3244
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-07-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified resource ID.
Affected configurations
• redhat jboss enterprise portal platform 6.2.0
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2015-1226.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html www.oracle.com
- http://www.securityfocus.com/bid/75941 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1232908 Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1226.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html www.oracle.com
- http://www.securityfocus.com/bid/75941 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1232908 Vendor Advisory