CVE-2012-3532

JBoss Enterprise Portal Platform < 5.2.2 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0733.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53005
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=851046
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/59015

Scores

EPSS 0.0066
EPSS Percentile 47.1%

Details

CWE
CWE-352
Status published
Products (8)
redhat/jboss_enterprise_portal_platform 4.3.0
redhat/jboss_enterprise_portal_platform 5.0.0
redhat/jboss_enterprise_portal_platform 5.0.1
redhat/jboss_enterprise_portal_platform 5.1.0
redhat/jboss_enterprise_portal_platform 5.1.1
redhat/jboss_enterprise_portal_platform 5.2.0
redhat/jboss_enterprise_portal_platform 5.2.1
redhat/jboss_enterprise_portal_platform < 5.2.2
Published Apr 12, 2013
Tracked Since Feb 18, 2026