What is the severity of CVE-2014-0245?

CVE-2014-0245 is classified as a medium severity vulnerability, potentially allowing unauthorized access under specific conditions.

How do I fix CVE-2014-0245?

To mitigate CVE-2014-0245, update the affected gatein-wsrp package to a version that addresses the thread safety issues.

What software is affected by CVE-2014-0245?

CVE-2014-0245 affects Red Hat's gatein-wsrp version 2.3.1.Final-prod and JBoss Portal version 6.2.0.

Can CVE-2014-0245 be exploited remotely?

Yes, CVE-2014-0245 can be exploited by unauthenticated remote attackers in high-concurrency environments.

What is the impact of CVE-2014-0245 on security?

The impact of CVE-2014-0245 includes the potential for privilege escalation and unauthorized actions on the affected system.

Vulnerability/
CVE-2014-0245

medium

5.9

CWE

362

26/5/2014

2/1/2020

6/8/2024

CVE-2014-0245: Race Condition

First published: Mon May 26 2014(Updated: )

It was found that the implementation of GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it is possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer and the endpoint in question is being used by a privileged user.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
redhat/gatein-wsrp-2.3.1.Final-prod	<1	1
Red Hat JBoss Portal	=6.2.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2014-0245?
CVE-2014-0245 is classified as a medium severity vulnerability, potentially allowing unauthorized access under specific conditions.
How do I fix CVE-2014-0245?
To mitigate CVE-2014-0245, update the affected gatein-wsrp package to a version that addresses the thread safety issues.
What software is affected by CVE-2014-0245?
CVE-2014-0245 affects Red Hat's gatein-wsrp version 2.3.1.Final-prod and JBoss Portal version 6.2.0.
Can CVE-2014-0245 be exploited remotely?
Yes, CVE-2014-0245 can be exploited by unauthenticated remote attackers in high-concurrency environments.
What is the impact of CVE-2014-0245 on security?
The impact of CVE-2014-0245 includes the potential for privilege escalation and unauthorized actions on the affected system.

agent/type
agent/first-publish-date
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
collector/redhat-bugzilla
source/Red Hat
alias/CVE-2014-0245
agent/software-canonical-lookup
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/description
agent/event
agent/trending
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
package-manager/redhat
vendor/redhat
canonical/red hat jboss portal
version/red hat jboss portal/6.2.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2014-0245?
CVE-2014-0245 is classified as a medium severity vulnerability, potentially allowing unauthorized access under specific conditions.
How do I fix CVE-2014-0245?
To mitigate CVE-2014-0245, update the affected gatein-wsrp package to a version that addresses the thread safety issues.
What software is affected by CVE-2014-0245?
CVE-2014-0245 affects Red Hat's gatein-wsrp version 2.3.1.Final-prod and JBoss Portal version 6.2.0.
Can CVE-2014-0245 be exploited remotely?
Yes, CVE-2014-0245 can be exploited by unauthenticated remote attackers in high-concurrency environments.
What is the impact of CVE-2014-0245 on security?
The impact of CVE-2014-0245 includes the potential for privilege escalation and unauthorized actions on the affected system.