[LPS-67680] Unauthorized access and modification of workflow tasks - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Resolution: Duplicate
Affects Version/s: 7.0.1 CE GA2
Fix Version/s: 7.0.2 CE GA3
Component/s: Core Infrastructure > Permissions, Security Vulnerability, Workflow
Labels:

Description

By constructing the correct URL, a user without the proper permissions can access and modify workflow tasks.

Attachments

Activity

People

Assignee:: Samuel Kong

Reporter:: Samuel Kong

Participants of an Issue:: Samuel Kong

Recent user:: Kiyoshi Lee

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 19/Aug/16 12:49 AM

Updated:: 28/Aug/20 4:38 AM

Resolved:: 19/Aug/16 12:51 AM

Days since last comment:: 6 years, 24 weeks, 2 days ago

Packages

Version	Package
7.0.2 CE GA3