CVE-2014-0245

CVE-2014-0245 describes a thread safety vulnerability in the GTNSubjectCreatingInterceptor class of gatein-wsrp, affecting JBoss Portal 6.2.0. Under high-concurrency or slow SOAP message execution, an unauthenticated remote attacker could gain privileged information if WS-Security is enabled and a privileged user is utilizing the WSRP endpoint. This medium-severity vulnerability (CVSS 5.9) has a network attack vector and high confidentiality impact, but requires high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion.