CVE-2016-6517

Summary

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2016/08/02/1
• http://www.securityfocus.com/bid/92215
• http://www.openwall.com/lists/oss-security/2016/08/01/5

References

• http://www.openwall.com/lists/oss-security/2016/08/02/1
• http://www.securityfocus.com/bid/92215
• http://www.openwall.com/lists/oss-security/2016/08/01/5

• ←Previous
• Next→