Lucene search

RedhatCVELIST:CVE-2011-1503

HistoryMay 07, 2011 - 7:00 p.m.

CVE-2011-1503

2011-05-0719:00:00

redhat

www.cve.org

liferay portal

xsl content

apache tomcat

oracle glassfish

xml files

file url

remote authentication

cve-2011-1503

AI Score

Confidence

Low

EPSS

0.002

Percentile

52.4%

JSON

The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.

References

issues.liferay.com/browse/LPS-13762

issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952

openwall.com/lists/oss-security/2011/03/29/1

openwall.com/lists/oss-security/2011/04/08/5

openwall.com/lists/oss-security/2011/04/11/9