CVE-2014-3417 | BDVDB-2026-61861 Detail

Description#

uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.jasig.org/uportal/download/uportal-4-0-13-1
https://issues.jasig.org/browse/UP-4106

Exploit#

No public exploit known

History#

Version 12014-05-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.