CVEvulnerability
CVE-2011-1571
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.
Affected configurations
• liferay liferay portal (>= 5.1.0 <= 5.1.2)
• liferay liferay portal (>= 6.0.0 <= 6.0.5)
References
- http://issues.liferay.com/browse/LPS-14726 Issue Tracking, Vendor Advisory
- http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952 Release Notes, Vendor Advisory
- http://openwall.com/lists/oss-security/2011/03/29/1 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/08/5 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/11/9 Mailing List, Third Party Advisory
- http://issues.liferay.com/browse/LPS-14726 Issue Tracking, Vendor Advisory
- http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952 Release Notes, Vendor Advisory
- http://openwall.com/lists/oss-security/2011/03/29/1 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/08/5 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/11/9 Mailing List, Third Party Advisory