Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x
    before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via
    unknown vectors. (CVE-2011-1571)

According to its self-reported version number, the installation of Liferay Portal hosted on the remote web server is affected by multiple vulnerabilities :

  - An arbitrary file download vulnerability exists when     Apache Tomcat is used, which allows remote,     authenticated users to download arbitrary files via an     entity declaration in conjunction with an entity     reference, related to an XML External Entity (aka XXE)     issue. (CVE-2011-1502)

  - An arbitrary file download vulnerability exists when     Apache Tomcat or Oracle GlassFish is used. The XSL     Content portlet allows remote, authenticated users to     read arbitrary XSL / XML files via a file:/// URL.
    (CVE-2011-1503)

  - A cross-site scripting vulnerability exists, which     allows remote, authenticated users to inject arbitrary     JavaScript or HTML via a blog title. (CVE-2011-1504)

  - A cross-site scripting vulnerability exists when Apache     Tomcat is used, which allows remote, authenticated users     to inject arbitrary JavaScript or HTML via a message     title. (CVE-2011-1570)

  - An unspecified vulnerability exists when Apache Tomcat     is used. The XSL Content portlet allows remote attackers     to execute arbitrary commands via unknown vectors.
    (CVE-2011-1571)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
428416	SCA: security update for com.liferay.portal:portal-service (GHSA-rpj9-pc39-h8j8)	Tenable Cloud Security	SCA Checks	medium
428416	SCA: security update for com.liferay.portal:portal-service (GHSA-rpj9-pc39-h8j8)	Tenable Self-Hosted Container Security	SCA Checks	medium
59230	Liferay Portal < 6.0.6 Multiple Vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2011-1571

medium

Tenable Plugins

medium

medium

high