Back

LOW

Mojarra: deployed web applications can read FacesContext from other applications under certain conditions

Published Jun 17, 2012

Description

Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context information an access resources from another WAR file by calling the FacesContext.getCurrentInstance function.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (0)

No CWE recorded.

References (14)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jun 17, 2012
Updated Aug 6, 2024
Reserved May 14, 2012
NVD
Status Modified
Modified Jun 16, 2026
Red Hat
Severity Low
Public date Jun 1, 2012