CVE-2021-33325

Katalog CVE

CVSS 4.9 · Medium EPSS 0,57%

Kerentanan Cleartext Storage of Sensitive Information pada liferay digital experience platform. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix pack 19, and 7.2 before fix pack 7, user's clear text passwords are stored in the database if workflow is enabled for user creation, which allows attackers with access to the database to obtain a user's password.

Rincian

Terbit di NVD

3 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 89 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://issues.liferay.com/browse/LPE-17042 patch · advisory vendor
• https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/1207... release notes · advisory vendor