VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 11, 2015· Updated Jun 17, 2026

CVE-2015-5176

CVE-2015-5176

Description

The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to resources via a request that asks to render a non-JSF resource.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Red Hat/Jboss Portalllm-fuzzy2 versions
    = 6.2.0+ 1 more
    • (no CPE)range: = 6.2.0
    • cpe:2.3:a:redhat:jboss_portal:6.2.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.