CVE:CVE-2011-1502
CNNVD:CNNVD-201105-089
当Apache Tomcat启用时，Liferay Portal Community Edition (CE) 6.0.6 GA之前的6.x版本的XML External Entity中存在漏洞。远程认证用户可以借助与实体引用相关的实体声明来读取任意文件。
solution:Upgrade liferay liferay_portal to a higher version than 6.0.5,and avoid the version [6.0.0,6.0.5]