VULNERABILITY INTELLIGENCE

CVE-2013-0314

CVSS score7.5 HIGH
EPSS probability1.64%
CISA KEVNot currently listed
Published2013-04-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.

Weakness classification

  • CWE-287: Improper Authentication

Primary references