CVE-2015-5176

2015-08-1114:00:00

redhat

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.6%

JSON

The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource.

References

rhn.redhat.com/errata/RHSA-2015-1543.html