CVE-2020-15841

Katalog CVE

CVSS 8.8 · High EPSS 1,5%

Kerentanan pada liferay digital experience platform. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature.

Rincian

Terbit di NVD

20 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 73 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://issues.liferay.com/browse/LPE-16928 issue tracking · advisory vendor
• https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/1193... patch · advisory vendor