BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Guests can view names and emailadresses of all Liferay users in liferay 6.1 May 13 2012 09:41AM
Jelmer Kuperus (jelmer advisories gmail com)
Guests can view names and emailadresses of all Liferay users in liferay 6.1

Description:

Liferay Portal is an enterprise portal written in Java

As an unauthenticated user it is possible to retrieve the names and
email adresses of all Liferay users.
To retrieve a list of all users simply issue the...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus