Remote address value is not reliable as cache key during the NTLM protocol

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.1 CE GA2, 6.1.20 EE GA2, 6.2.0 CE B2
• Fix Version/s: 6.1.X EE, 6.2.0 CE B2
• Component/s: Application Security, Application Security > NTLM, Security Vulnerability
• Labels:
  • liferay-fixpack-platform-3-6130
• Branch Version/s:
  6.1.x
• Backported to Branch:
  Committed
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/13137

When the browser clients are behind a proxy, all the clients have the same IP address and this could cause a failure during the authentication when simultaneous requests are fired.