Skip to content
OpenAdvisories

Package · Maven

org.picketlink:picketlink-tomcat-common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2015-3158

    PicketLink does not properly check role based authorization

    The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application r…

    org.picketlink:picketlink-tomcat-common Maven