CVE-2013-0314: High severity red hat jboss portal vulnerability
The GateIn Portal Export / Import Gadget allows an export zip to be uploaded and imported to a site without authentication. A remote attacker could use this flaw to modify the content of a site, remove the site or modify access controls applied to portlets in the site.
Other sources
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0314?
CVE-2013-0314 is considered a critical vulnerability due to its potential to allow unauthorized access and modifications to a site's content.
How do I fix CVE-2013-0314?
To fix CVE-2013-0314, it is recommended to apply the appropriate patches provided by Red Hat for JBoss Enterprise Portal Platform version 5.2.2.
What are the risks associated with CVE-2013-0314?
The risks of CVE-2013-0314 include potential data loss, unauthorized alterations to site content, and changes to access controls.
Who is affected by CVE-2013-0314?
CVE-2013-0314 affects users of Red Hat JBoss Enterprise Portal Platform version 5.2.2.
Can CVE-2013-0314 be exploited remotely?
Yes, CVE-2013-0314 can be exploited remotely by an attacker without authentication.