Lucene search
PRIOn knowledge basePRION:CVE-2020-28885HistoryJan 28, 2022 - 12:15 p.m.
Command injection
2022-01-2812:15:00
PRIOn knowledge base
www.prio-n.com
7
Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject commands through the Gogo Shell module to execute any OS command on the Liferay Portal Sever. NOTE: The developer disputes this as a vulnerability since it is a feature for administrators to access and execute commands in Gogo Shell and therefore not a design fla
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay_portal | eq | 7.2 ga1 | |
| liferay_portal | eq | 7.3.5 ga6 |
Related
cvelist
cvelist
CVE-2020-28885
2022-01-28 11:17:38
nvd
nvd
CVE-2020-28885
2022-01-28 12:15:07
cve
cve
CVE-2020-28885
2022-01-28 12:15:07