CVE

Id
49414  
CVE No.
CVE-2011-1502  
Status
Candidate  
Description
Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to read arbitrary files via an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536378 49414 CVE-2011-1502 MLIST:[oss-security] 20110329 CVE requests : Liferay 6.0.6  View
536379 49414 CVE-2011-1502 URL:http://openwall.com/lists/oss-security/2011/03/29/1  View
536380 49414 CVE-2011-1502 MLIST:[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6  View
536381 49414 CVE-2011-1502 URL:http://openwall.com/lists/oss-security/2011/04/08/5  View
536382 49414 CVE-2011-1502 MLIST:[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6  View
536383 49414 CVE-2011-1502 URL:http://openwall.com/lists/oss-security/2011/04/11/9  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34170 JVNDB-2011-004412 Asterisk Open Source におけるサービス運用妨害 (DoS) の脆弱性 Asterisk Open Source および Asterisk Business Edition には、特定のインターフェースへ認証されていないセッション数を制限しないため、サービス運用妨害 (ファイル記述子の枯渇およびディスク容量の枯渇) 状態となる脆弱性が存在します。 CVE-2011-1507 49414 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004412.html  View