Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update

JBoss Enterprise Application Platform 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

CVE-2012-2672

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function...

CVE-2012-2672

CVE-2012-2672 affects Oracle Mojarra 2.1.7. The issue arises when the FacesContext reference is not properly cleaned up during startup, leaving a ThreadLocal that can allow a JSF WAR calling FacesContext.getCurrentInstance() at startup to access resources from another deployed WAR. This is a loca...