CVE

Id
49415  
CVE No.
CVE-2011-1503  
Status
Candidate  
Description
The XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat or Oracle GlassFish is used, allows remote authenticated users to read arbitrary (1) XSL and (2) XML files via a file:/// URL.  
Phase
Assigned (20110321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536384 49415 CVE-2011-1503 MLIST:[oss-security] 20110329 CVE requests : Liferay 6.0.6  View
536385 49415 CVE-2011-1503 URL:http://openwall.com/lists/oss-security/2011/03/29/1  View
536386 49415 CVE-2011-1503 MLIST:[oss-security] 20110408 Re: CVE requests : Liferay 6.0.6  View
536387 49415 CVE-2011-1503 URL:http://openwall.com/lists/oss-security/2011/04/08/5  View
536388 49415 CVE-2011-1503 MLIST:[oss-security] 20110411 Re: CVE requests : Liferay 6.0.6  View
536389 49415 CVE-2011-1503 URL:http://openwall.com/lists/oss-security/2011/04/11/9  View
536390 49415 CVE-2011-1503 CONFIRM:http://issues.liferay.com/browse/LPS-13762  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33114 JVNDB-2011-003354 Microsoft Publisher 2003 および 2007 における任意のコードを実行される脆弱性 Microsoft Publisher 2003 および 2007 は、関数ポインタへのメモリ割り当てを適切に管理しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-1508 49415 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003354.html  View