CVE-2011-1502

Опубликовано: 07 мая 2011

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to read arbitrary files via an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.

Ссылки

http://issues.liferay.com/browse/LPS-14927
Issue Tracking
Vendor Advisory
http://openwall.com/lists/oss-security/2011/03/29/1
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/08/5
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/11/9
Mailing List
Third Party Advisory
http://issues.liferay.com/browse/LPS-14927
Issue Tracking
Vendor Advisory
http://openwall.com/lists/oss-security/2011/03/29/1
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/08/5
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/11/9
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:liferay:liferay_portal:*:*:*:*:community:*:*:*

Версия от 6.0.0 (включая) до 6.0.5 (включая)

EPSS

Процентиль: 66%

0.00514

Низкий

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2011-1502

debian

больше 14 лет назад

Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache ...

GHSA-xhf5-qrfm-cqf5

github

больше 3 лет назад