VULNERABILITY INTELLIGENCE

CVE-2012-2672

CVSS score2.1 LOW
EPSS probability0.55%
CISA KEVNot currently listed
Published2012-06-17
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.

Primary references