PT-2019-12309 · Liferay · Liferay Portal

Akkus + 1 · Publicado 2019-04-22 · Atualizado 2024-08-04 · CVE-2019-11444

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Liferay Portal CE version 7.1.2 GA3

Description An issue in Liferay Portal CE allows an attacker to execute OS commands using the Groovy script console. This can be achieved via a command.execute() call. The attacker needs valid credentials for an application administrator user account to exploit this issue. The exploitation can be demonstrated by setting "def cmd =" in the ServerAdminPortlet script value to group/control panel/manage.

Recommendations For Liferay Portal CE version 7.1.2 GA3, consider restricting access to the Groovy script console to minimize the risk of exploitation. As a temporary workaround, limit the use of the command.execute() call in the Groovy script console until a more robust solution is available.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-11444

Produtos afetados

Liferay Portal

Referências · 6

• 🔥 https://pentest.com.tr/exploits/Liferay-CE-Portal-Tomcat-7-1-2-ga3-Groovy-Console-Remote-Command-Execution-Metasploit.html · Exploit
• 🔥 https://exploit-db.com/exploits/46525 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11444 · Nota
• https://osv.dev/vulnerability/CVE-2019-11444 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11444 · Nota de Segurança
• https://dev.liferay.com/discover/portal/-/knowledge_base/7-1/running-scripts-from-the-script-console · Nota