Search Results

All Results 6965
Sort By
Resource Type
Applicable Versions
Deployment Approach
Capability
Feature
Defining Encryption Algorithms for Passwords Stored in the Database
legacy How To
By default, Liferay encrypts the passwords that go into the database. The default algorithm is SHA-1 in 6.0 and 6.1 versions, which changed to PBKDF2WithHmacSHA1/160/128000 in version...
Communicate Standard for Using 'Live-Editable' Portlets for Staging
legacy How To
This article outlines a practical suggestion for keeping data in sync between the staging and live site for portlets that allow changes in both places. Following the workaround will help prevent staging publication...
Liferay's permissions.inline.sql.check.enabled property
legacy Troubleshooting
When searching, guest users are able to see highlighted folders, categories, and threads when they have no permission to view them. Resolution During search, Liferay runs a permission...
Liferay Portal Activation Key Deployment Instructions for versions 5.2 SP5 to 6.0.X
legacy How To
Activation Key deployment for Liferay Portal versions 5.2.9 (Service Pack 5) to 6.0.x is different from key deployment for Liferay versions 5.2 SP4 and earlier. Activation keys are no...
Elasticsearch and Liferay Enterprise Search Security Advisory: CVE-2018-3831
legacy
CVE-2018-3831 reports that, "Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings...
Excluding User Groups Not Part of the BaseDN In LDAP Import
legacy How To
This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. In older versions of Liferay Portal...
Apache Struts 2 Vulnerability: CVE-2017-9805 and CVE-2017-12611 - REST XStream FreeMarker
legacy
The following Common Vulnerabilities and Exposures (CVE) have been reported for Apache Struts 2: CVE-2017-9805 CVE-2017-12611 CVE-2018-1327 - REST XStream FreeMarker CVE-2018-11776 How are Liferay DXP (both 7.0 and...
JSESSIONID Changes as Part of Liferay Security
legacy
This article documents Liferay's position regarding the Session Identifier (JSESSIONID), including how and why a new JSESSIONID is generated.  Resolution Customers doing their own security scan of the Liferay platform...