CVE-2013-0314 Auth bypass in n/a
Remote attackers can bypass authentication to modify site contents, delete sites, or alter portlet access controls in JBoss Enterprise Portal Platform.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-0314?
CVE-2013-0314 is a high-severity authentication bypass vulnerability in n/a, published on 12 Apr 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.
Weakness: CWE-287
Which versions are affected by CVE-2013-0314?
It affects 1 product.
Products include Redhat Jboss Enterprise Portal Platform.
How do I fix CVE-2013-0314?
No fix has been published for CVE-2013-0314 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2013-0314 being exploited?
There is no known exploitation of CVE-2013-0314 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-5gr9-q682-676m.