Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat:jboss_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat (a3686528-5679-55c9-b393-abe45df26bd2)
ProductJboss Portal (9fc4e927-8a8b-52a2-97b5-5bf354308492)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0245 vulnerable 2026-06-08 05:05:12.451378 Details available
It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user. This affects JBoss Portal 6.2.0.
Published: 2020-01-02T19:42:50.000Z
Updated: 2024-08-06T09:05:39.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5626 vulnerable 2026-06-08 05:02:57.605725 Details available
EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.
Published: 2020-01-23T18:10:30.000Z
Updated: 2024-08-06T21:14:16.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.