Bugtraq mailing list archives
Specially crafted webdav request allows reading of local files on liferay 6.0.x
From: Jelmer Kuperus <jelmer.advisories () gmail com>
Date: Thu, 19 Apr 2012 23:22:00 +0200
Specially crafted webdav request allows reading of local files on liferay 6.0.x Description: Liferay Portal is an enterprise portal written in Java By creating a specially crafted webdav request that contains an external entity it is possible to read files from a liferay server. and echo these back in the response. You could use this for instance to download configuration files containing database passwords or ssh keys located in a users home folder Proof of concept: Code demonstrating the vulnerability can be found at https://github.com/jelmerk/LPS-24562-proof Systems affected: Liferay 6.0.5 ce is confirmed to be vulnerable Liferay 6.0.6 ce is confirmed to be vulnerable Vendor status : Liferay was notified januari 2 2012 by filing a bug in their public bugtracker under issue number LPS-24562. The issue has since been flagged as private and has been resolved.
Current thread:
- Specially crafted webdav request allows reading of local files on liferay 6.0.x Jelmer Kuperus (Apr 20)