Create CVE-2019-16891.md

add CVE-2019-16891
This commit is contained in:
Goby 2023-04-01 12:39:52 +08:00 committed by GitHub
parent 3665a91996
commit d391859db0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

12
CVE-2019-16891.md Normal file
View File

@ -0,0 +1,12 @@
## Liferay Portal RCE (CVE-2019-16891)
| **Vulnerability** | **Liferay Portal RCE (CVE-2019-16891)** |
| :----: | :-----|
| **Chinese name** | Liferay Portal 远程代码执行漏洞CVE-2019-16891 |
| **CVSS core** | 9.8 |
| **FOFA Query** (click to view the results directly)| [body="Powered by Liferay Portal" \|\| header="Liferay Portal" \|\| banner="Liferay Portal" \|\| header="guest_language_id=" \|\| banner="guest_language_id=" \|\| body="Liferay.AUI" \|\| body="Liferay.currentURL"](https://fofa.info/result?qbase64=Ym9keT0iUG93ZXJlZCBieSBMaWZlcmF5IFBvcnRhbCIgfHwgaGVhZGVyPSJMaWZlcmF5IFBvcnRhbCIgfHwgYmFubmVyPSJMaWZlcmF5IFBvcnRhbCIgfHwgaGVhZGVyPSJndWVzdF9sYW5ndWFnZV9pZD0iIHx8IGJhbm5lcj0iZ3Vlc3RfbGFuZ3VhZ2VfaWQ9IiB8fCBib2R5PSJMaWZlcmF5LkFVSSIgfHwgYm9keT0iTGlmZXJheS5jdXJyZW50VVJMIg%3D%3D) |
| **Number of assets affected** | 144504 |
| **Description** | Liferay Portal is a J2EE-based portal solution developed by American Liferay Company. The solution uses technologies such as EJB and JMS, and can be used as Web publishing and shared workspace, enterprise collaboration platform, social network, etc. A code issue vulnerability exists in Liferay Portal CE version 6.2.5. This vulnerability stems from improper design or implementation problems in the code development process of network systems or products. |
| **Impact** | A code issue vulnerability exists in Liferay Portal CE version 6.2.5. This vulnerability stems from improper design or implementation problems in the code development process of network systems or products. |
![](https://s3.bmp.ovh/imgs/2023/04/01/267b1226161fa8b5.gif)