Liferay Portal 'Json' Service Information Disclosure Vulnerability

Bugtraq ID:	42416
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 12 2010 12:00AM
Updated:	May 12 2010 12:00AM
Credit:	Stefano Di Paola of Minded Security
Vulnerable:	Liferay Enterprise Portal 5.3 Liferay Enterprise Portal 5.1.2 Liferay Enterprise Portal 4.4 Liferay Enterprise Portal 4.3.7 Liferay Enterprise Portal 4.3.6 Liferay Enterprise Portal 4.3.1 Liferay Enterprise Portal 4.3 Liferay Enterprise Portal 4.1.3 Liferay Enterprise Portal 4.1.1 Liferay Enterprise Portal 4.1
Not Vulnerable:

Liferay Portal 'Json' Service Information Disclosure Vulnerability

Liferay Portal is prone to an information-disclosure vulnerability that may expose username lists and passwords.

Successful exploits will allow authenticated attackers to obtain sensitive information that may aid in further attacks.

Liferay Portal 5.1.2 is vulnerable; other versions may also be affected.

Liferay Portal 'Json' Service Information Disclosure Vulnerability

Attackers can exploit this issue via a browser.

Liferay Portal 'Json' Service Information Disclosure Vulnerability

Solution:
Reportedly this issue has been fixed. Please see the references for details.

Liferay Portal 'Json' Service Information Disclosure Vulnerability

References:

• Liferay Homepage (Liferay)
  
• Liferay Json Service Multiple Information Leakage (Minded Security)
  
• Liferay Portal Product Page (Liferay)
  
• Unauthorized users may be able to retrieve username list and password hashed (Liferay)