[LPE-16148] Access to restricted Message Board messages via URL manipulation - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Minor
Resolution: Fixed
Affects Version/s: 7.0 DE (7.0.10)
Fix Version/s: 7.0.X EE
Component/s: Collaboration > Message Boards, Security Vulnerability
Labels:

7.0 Fix Pack Version:
30

Description

Users without the necessary permission may be able to access a Message Board message via URL manipulation.

Attachments

Activity

People

Assignee:: EE Support

Reporter:: Enterprise Release HU

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 04/Sep/17 8:57 PM

Updated:: 10/May/19 1:20 AM

Resolved:: 08/Sep/17 12:40 PM

Packages

Version	Package
7.0.X EE