Lucene search
HistoryApr 12, 2013 - 10:55 p.m.
CVE-2013-0314
security
vulnerability
gatein portal
jboss ep platform 5.2.2
cve-2013-0314
nvd
authentication
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.7%
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.
Affected configurations
Node
redhatjboss_enterprise_portal_platformMatch5.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:jboss_enterprise_portal_platform | redhat jboss enterprise portal platform | eq | 5.2.2 |
Related
seebug
seebug
JBoss Enterprise Portal GateIn Portalζͺιͺθ―η«ηΉε―Όε
₯ζΌζ΄
2013-04-16 00:00:00
nvd
nvd
CVE-2013-0314
2013-04-12 22:55:01
prion
prion
Design/Logic Flaw
2013-04-12 22:55:00
cvelist
cvelist
CVE-2013-0314
2013-04-12 22:00:00
redhat
redhat
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.7%
Related for CVE-2013-0314