Red Hat Security AdvisoryRHSA-2013:0613
JBoss Enterprise Portal Platform 5.2.2 security update
Released 2013-03-07 · Red Hat rating Important · View on Red Hat →
Fixes 2 records
Priority LOW 36
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01635 · Published 2013-04-12 · Partial fix CWE-287
Priority LOW 26
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion (XEE) att…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01371 · Published 2013-04-12 · Partial fix CWE-264
