⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-3417

MEDIUM · 6.5 CVSS Gepubliceerd: 29-05-2014 CWE-264

Beschrijving

uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.

Vendors

Jasig

Affected products

Uportal

References

www.jasig.org
issues.jasig.org