Direct Access to Admin Pages Security Issue

[Kinshuk Gupta，修改在11 年前。]

Hi,

Recently, we did a AppScan of our application built using liferay 6.1 GA1 version. Among number of issues reported is - direct access to Admin pages. The following Urls were identified :

https://10.66.91.59:8443/c/
https://10.66.91.59:8443/c/portal/logout
https://10.66.91.59:8443/c/portal/admin/
https://10.66.91.59:8443/c/portal/x2fweb/

Is there any way to secure these /c/ Urls in Liferay?

Thanks

[David H Nebinger，修改在11 年前。]

The pages are open, but if you try to get there I think you'll find Liferay doesn't let you in...