Lucene search

RedhatCVE-2013-0314

HistoryApr 12, 2013 - 10:55 p.m.

CVE-2013-0314

2013-04-1222:55:01

CWE-287

redhat

web.nvd.nist.gov

security

vulnerability

gatein portal

jboss ep platform 5.2.2

cve-2013-0314

nvd

authentication

remote attack

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.009

Percentile

82.7%

JSON

The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.

Affected configurations

Nvd

Node

redhatjboss_enterprise_portal_platformMatch5.2.2

VendorProductVersionCPE
redhatjboss_enterprise_portal_platform5.2.2cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	jboss_enterprise_portal_platform	5.2.2	cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.2:::::::*

References

rhn.redhat.com/errata/RHSA-2013-0613.html

secunia.com/advisories/52552

www.osvdb.org/91120

bugzilla.redhat.com/show_bug.cgi?id=913327

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.009

Percentile

82.7%

JSON

Related for CVE-2013-0314