[LPE-15911] Unauthorized access to unpublished documents via URL manipulation - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Minor
Resolution: Completed
Affects Version/s: 6.2 EE GA1 (6.2.10), 7.0 DE (7.0.10)
Fix Version/s: 6.2.X EE, 7.0.X EE
Component/s: DM, Security Vulnerability, Workflow
Labels:

Fix Pack Status:
Scheduled
7.0 Fix Pack Version:
19

Description

An unauthorized user can access unpublished documents in Documents and Media via URL manipulation.

Attachments

Activity

People

Assignee:: Joshua Cords

Reporter:: Alec Shay

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 24/May/17 4:04 PM

Updated:: 04/Jul/19 8:27 AM

Resolved:: 10/Sep/18 8:47 AM

Packages

Version	Package
6.2.X EE
7.0.X EE