CVE-2015-1926

Impact:
Moderate
Public Date:
2015-07-30
Bugzilla:
1213007: CVE-2015-1926 Portlet spec: Information disclosure via missing access restriction in resource dispatching
The Java Portlet Specification JSR286 API jar file code could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to resources located within the web application. An attacker could exploit this vulnerability to obtain configuration data and other sensitive information.

Find out more about CVE-2015-1926 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

CVE-2015-1926 did not affect JBoss Portal Platform as provided by Red Hat. For further detail, refer to the knowledge base article at https://access.redhat.com/solutions/1488163

Affected Packages State

Platform Package State
Red Hat JBoss Portal Platform 6 portlet Not affected

This page is generated automatically and has not been checked for errors or omissions.

For clarification or corrections please contact Red Hat Product Security.

Last Modified
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.