medium6.5
CVE-2014-3417
uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIB…
Impact
uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jasig | Uportal | through 4.0.13 |