Liferay Portal suffers from a takeover vulnerability due to a single HTTP request allowing an attacker to reconfigure which memcached to use. Proof of concept code included. Version 6.1 ce is confirmed vulnerable.
52363e44fb0da67d9da2ef19c482ca115b0e60ea50da8776e953b5d028b5ea91