PT-2019-12309 · Liferay · Liferay Portal

Akkus + 1 · Published 2019-04-22 · Updated 2024-08-04 · CVE-2019-11444

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Liferay Portal CE version 7.1.2 GA3

Description An issue in Liferay Portal CE allows an attacker to execute OS commands using the Groovy script console. This can be achieved via a command.execute() call. The attacker needs valid credentials for an application administrator user account to exploit this issue. The exploitation can be demonstrated by setting "def cmd =" in the ServerAdminPortlet script value to group/control panel/manage.

Recommendations For Liferay Portal CE version 7.1.2 GA3, consider restricting access to the Groovy script console to minimize the risk of exploitation. As a temporary workaround, limit the use of the command.execute() call in the Groovy script console until a more robust solution is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2019-11444

Affected Products

Liferay Portal

References · 6

• 🔥 https://pentest.com.tr/exploits/Liferay-CE-Portal-Tomcat-7-1-2-ga3-Groovy-Console-Remote-Command-Execution-Metasploit.html · Exploit
• 🔥 https://exploit-db.com/exploits/46525 · Exploit
• https://osv.dev/vulnerability/CVE-2019-11444 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11444 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11444 · Note
• https://dev.liferay.com/discover/portal/-/knowledge_base/7-1/running-scripts-from-the-script-console · Note