CVE-2012-2672

NONECVSS 0.0

0.0

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.

🔗 References (20)

secalert@redhathttp://java.net/jira/browse/JAVASERVERFACES-2436
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-1591.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-1592.html
secalert@redhathttp://rhn.redhat.com/errata/RHSA-2012-1594.html
secalert@redhathttp://secunia.com/advisories/49284
secalert@redhathttp://secunia.com/advisories/51607
secalert@redhathttp://www.openwall.com/lists/oss-security/2012/06/07/2
secalert@redhathttp://www.openwall.com/lists/oss-security/2012/06/07/3
secalert@redhathttps://exchange.xforce.ibmcloud.com/vulnerabilities/76179
secalert@redhathttps://issues.jboss.org/browse/JBPAPP-9197
af854a3a-2127-422b-91ae-364da2661108http://java.net/jira/browse/JAVASERVERFACES-2436
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2012-1591.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2012-1592.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2012-1594.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/49284

Is Your Infrastructure Affected by CVE-2012-2672?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2012-2672

📅 Published

🔄 Last Modified

🔗 References (20)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2012-2672?