What’s Vulnerable › Vulnerabilities

CVE-2014-0245

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-02 · updated 2026-06-17
• Weakness: CWE-362

Description

It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where SOAP messages take long to execute, it was possible for an unauthenticated remote attacker to gain privileged information if WS-Security is enabled for the WSRP Consumer, and the endpoint in question is being used by a privileged user. This affects JBoss Portal 6.2.0.

Affected products

• Red Hat JBoss Portal: 6.2.0

References

• https://access.redhat.com/errata/RHSA-2015:1009
• https://access.redhat.com/security/cve/cve-2014-0245
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0245
• https://access.redhat.com/errata/RHSA-2015:1009
• https://access.redhat.com/security/cve/cve-2014-0245
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0245

Get alerted when CVE-2014-0245 or the next vulnerability affects your stack