@JSONWebService on implementation class is ignored

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE, 7.0.0 Beta 7
• Fix Version/s: 6.2.X EE, 7.0.0 DXP SP2, 7.0.0 DXP FP13, 7.0.0 DXP SP3, 7.0.3 CE GA4, Master
• Component/s: Security Vulnerability, Web Services, Web Services > JSON WS
• Labels:
  • liferay-digital-enterprise-70-sp3
  • liferay-fixpack-de-13-7010
  • liferay-fixpack-portal-138-6210
  • lsv
  • sev-3
• Branch Version/s:
  7.0.x, 6.2.x
• Backported to Branch:
  Committed
• Story Points: 1
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/40783

Steps to reproduce:
1, Go to http://localhost:8080/api/jsonws
2, Search for "portal"

Expected result: Only two methods should be visible: getBuildNumber and getVersion
Actual result: All methods are available

---

CVSS Base Score: 5.5
CVSS Temporal Score: 5
CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:N/E:P/RL:U/RC:C)