RedHat JBoss Portal 6.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_portal:6.2.0:*:*:*:*:*:*:*
part: a version: 6.2.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Portal (12c31841-fd97-5707-ac1e-fafb66a80829) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-5176 |
vulnerable | 2026-06-08 05:06:49.138502 |
Details available
The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource.
Published: 2015-08-11T14:00:00.000Z
Updated: 2024-08-06T06:41:07.566Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0245 |
vulnerable | 2026-06-08 05:05:12.452054 |
Details available
It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user. This affects JBoss Portal 6.2.0.
Published: 2020-01-02T19:42:50.000Z
Updated: 2024-08-06T09:05:39.384Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.