Design/Logic Flaw

2013-04-1222:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.7%

JSON

The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.

CPENameOperatorVersion
jboss_enterprise_portal_platformeq5.2.2

CPE	Name	Operator	Version
	jboss_enterprise_portal_platform	eq	5.2.2

References

rhn.redhat.com/errata/RHSA-2013-0613.html

secunia.com/advisories/52552

www.osvdb.org/91120

bugzilla.redhat.com/show_bug.cgi?id=913327