7.5

CVE-2013-0314

EPSS 0.64%
Veröffentlicht 12.04.2013 22:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Jboss Enterprise Portal Platform Version5.2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.64%	0.695

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://rhn.redhat.com/errata/RHSA-2013-0613.html

Vendor Advisory

http://secunia.com/advisories/52552

Vendor Advisory

http://www.osvdb.org/91120

https://bugzilla.redhat.com/show_bug.cgi?id=913327

https://nvd.nist.gov/vuln/detail/CVE-2013-0314

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0314

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0314

EUVD