Security Advisory

CVE-2020-15841

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-07-20 01:06:39

Last updated 2024-08-04 13:30:22

Assigner mitre

State PUBLISHED

Description

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP servers password via the Test LDAP Connection feature.

← Browse all CVEs View on cve.org ↗