1 matches found
WSRP: Information disclosure via unsafe concurrency handling in interceptor
It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain...
5.9CVSS5.8AI score0.01015EPSS
SaveExploits0References4
20