br.com.caelum.stella:myfaces-example (1.1), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +34 more potentially affected by CVE-2010-2057 via org.apache.myfaces.core:myfaces-impl (>=1.2.0, <=1.2.8)

org.apache.myfaces.core:myfaces-impl MAVEN version =1.2.0, =1.2.1, =2.2, =2.2, =2.1, =2.1, =2.0.1, =2.0.1, =2.2, =2.2, =1.2.1, =1.2.1, =1.0.0-alpha-2, =1.0.0-alpha-2, =2.0.0-alpha-2 and more Source cves: CVE-2010-2057 Source advisory: GHSA-4FV4-CQ5V-X45M...

Red Hat JBoss Portal Information Disclosure Vulnerability

Red Hat JBoss Portal is an open source and standards-compliant portal platform from Red Hat Red Hat. The platform can build , layout of a portal Web interface for publishing , managing content and customizing the user experience. A security vulnerability exists in Portlet Bridge for JavaServer...

Oracle WebCenter Portal Multiple Vulnerabilities (July 2015 CPU)

Binary data oraclewebcenterportaljuly2015cpu.nbin...

Design/Logic Flaw

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...

CVE-2015-3244

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used with GenericPortlet's default resource serving, does not properly restrict access to restricted resources, enabling remote attackers to obtain sensitive information via a URL with a modified resource ID. Affected pro...

CVE-2015-3244

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...

PT-2015-6120

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Portal version 6.2.0 Description The issue allows remote attackers to obtain sensitive information via a URL with a modified resource ID, due to improper restriction of access to restricted resources in the Portlet Bridge for...

CVE-2015-3244: Undefined Security Weakness

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...