CVE-2012-2672

CVE-2012-2672 describes a vulnerability in Oracle Mojarra 2.1.7 where the FacesContext reference is not properly cleared during startup. This flaw allows local users to gain unauthorized access to context information and resources from other web application archive (WAR) files by invoking the FacesContext.getCurrentInstance function. With a CVSS score of 2.1, this vulnerability has low attack complexity and requires local access, potentially leading to information disclosure. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.