[LPS-67680] Unauthorized access and modification of workflow tasks - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Resolution: Duplicate
Affects Version/s: 7.0.1 CE GA2
Fix Version/s: 7.0.2 CE GA3
Component/s: Application Security > Permissions, Security Vulnerability, Workflow
Labels:

Description

By constructing the correct URL, a user without the proper permissions can access and modify workflow tasks.

Attachments

Activity

People

Assignee:: Samuel Kong

Reporter:: Samuel Kong

Participants of an Issue:: Samuel Kong

Recent user:: Brian Wulbern

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 19/Aug/16 12:49 AM

Updated:: 28/Aug/20 4:38 AM

Resolved:: 19/Aug/16 12:51 AM

Days since last comment:: 4 years, 10 weeks, 1 day ago

Packages

Version	Package
7.0.2 CE GA3