Description
uPortal before 4.0.13.1 does not properly check the CONFIG permission, which allows remote authenticated users to configure portlets by leveraging the SUBSCRIBE permission for a portlet.
Remediation
References
https://issues.jasig.org/browse/UP-4106
http://www.jasig.org/uportal/download/uportal-4-0-13-1
Related Vulnerabilities
CVE-2014-3741 Vulnerability in npm package printer
CVE-2017-2613 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2020-28472 Vulnerability in maven package org.webjars.bower:aws-sdk
CVE-2022-24759 Vulnerability in npm package @chainsafe/libp2p-noise
CVE-2023-25194 Vulnerability in maven package org.apache.kafka:kafka-clients