CVE-2015-5176

The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which…

published August 11, 2015

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01648 · 76.3th percentile
Published
2015-08-11T14:00Z
EPSS history
Timeline
  • 11 AUG 14:00Z
    The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which…
    cvelistv5