Users can add any portlet to a page by manipulating the URL

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 6.1 EE GA2 (6.1.20), 6.1 EE GA3 (6.1.30), 6.2 EE GA1 (6.2.10)
• Fix Version/s: 6.1.X EE, 6.2.X EE
• Component/s: Application Security, Application Security > Permissions
• Labels:
  • 61-ee-ga3-sp1
  • 62-ee-sp2
  • hotfix
  • hotfix-6120
  • liferay-fixpack-platform-10-6130
  • liferay-fixpack-platform-7-6210
  • permissions
  • security
• Fix Pack Version/s:
  6.1 EE GA3 (6.1.30), 6.2 EE GA1 (6.2.10)

Users can add any portlet to a page by manipulating the URL.