Beveiligingsadvies

CVE-2020-15841

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-07-20 01:06:39

Laatst bijgewerkt 2024-08-04 13:30:22

Toegewezen door mitre

CVSS-score 8.3

Status PUBLISHED

Beschrijving

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature.

← Alle CVE's bekijken Bekijk op cve.org ↗