Liferay Portal Multiple Security Vulnerabilities
BID:56589
Info
Liferay Portal Multiple Security Vulnerabilities
| Bugtraq ID: | 56589 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 19 2012 12:00AM |
| Updated: | Nov 19 2012 12:00AM |
| Credit: | Amos Fong and Samuel Kong |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Liferay Portal Multiple Security Vulnerabilities
Liferay Portal is prone to multiple security vulnerabilities including:
1. An arbitrary file-deletion vulnerability
2. An information disclosure vulnerability
3. An arbitrary file-creation vulnerability
Successful exploits may allow an attacker to delete arbitrary files, obtain sensitive information, or create arbitrary files; this may aid in launching further attacks.
Liferay Portal 6.1 CE GA2 (6.1.1) is vulnerable; other versions may also be affected.
Liferay Portal is prone to multiple security vulnerabilities including:
1. An arbitrary file-deletion vulnerability
2. An information disclosure vulnerability
3. An arbitrary file-creation vulnerability
Successful exploits may allow an attacker to delete arbitrary files, obtain sensitive information, or create arbitrary files; this may aid in launching further attacks.
Liferay Portal 6.1 CE GA2 (6.1.1) is vulnerable; other versions may also be affected.
Exploit / POC
Liferay Portal Multiple Security Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Liferay Portal Multiple Security Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.