CVE-2015-3244

Published: Jul 16, 2015Modified: May 6, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified resource ID.

Affected (1)

Products: Redhat: Jboss Enterprise Portal Platform

1 product

Jboss Enterprise Portal Platform

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Portal Platform	Version 6.2.0

Related CWEs

References (8)

http://rhn.redhat.com/errata/RHSA-2015-1226.html

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/75941

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1232908

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-1226.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/75941

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1232908

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.