2.1

CVE-2012-2672

Exploit
Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Mojarra Version2.1.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.414
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2012-1591.html
http://rhn.redhat.com/errata/RHSA-2012-1592.html
http://rhn.redhat.com/errata/RHSA-2012-1594.html
http://secunia.com/advisories/51607
http://java.net/jira/browse/JAVASERVERFACES-2436
Exploit
http://secunia.com/advisories/49284
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/06/07/2
http://www.openwall.com/lists/oss-security/2012/06/07/3
https://exchange.xforce.ibmcloud.com/vulnerabilities/76179
https://issues.jboss.org/browse/JBPAPP-9197