CVE-2012-2672

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access…

published June 17, 2012

CVSS
—
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00545 · 44.7th percentile
Published
2012-06-17T01:00Z
EPSS history
Timeline
  • 17 JUN 01:00Z
    Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access…
    cvelistv5