Re: JEtspeed Security problem

[Chris Kimpton <ki...@yahoo.com>]

--- Frans Thamura <fr...@hotmail.com> wrote:
> Hi all,
> 
> Try this..
> 
> http://localhost:8080/jetspeed/portal/action/controls.Customize
> 
> and you can modify the defaul psml. in anon directory.
> 
> this is a serious bug..
> 
> 

Hi,  

Were you logged in before you did this?

Are you behind a firewall - could it be that it was caching the
result?

Which version of jetspeed are you using?

I just tried it with fairly current CVS code and the url just gives
me the home page - no customizer.

I had just been logged in, but then I logged out.

I also tried restarting tomcat and going direct to the url - still
just the homepage.

Regards,
Chris

=====
Need somewhere to Live in London? - Then go to http://freeflats.com

__________________________________________________
Do You Yahoo!?
Find a job, post your resume.
http://careers.yahoo.com

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>