CVE-2020-15841
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature.
Liferay Portal versiones anteriores a 7.3.0, y Liferay DXP versión 7.0 anterior al paquete de corrección 89, versión 7.1 anterior al paquete de corrección 17, y versión 7.2 anterior al paquete de corrección 4, no prueba de forma segura una conexión a un servidor LDAP, lo que permite a los atacantes remotos obtener la contraseña del servidor LDAP a través de la función Probar conexión LDAP
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-07-20 CVE Reserved
- 2020-07-20 CVE Published
- 2024-08-04 CVE Updated
- 2024-08-29 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317439 | 2021-07-21 |
| URL | Date | SRC |
|---|---|---|
| https://issues.liferay.com/browse/LPE-16928 | 2021-07-21 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | - |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_13 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_14 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_24 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_25 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_26 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_27 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_28 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_3\+ |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_30 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_33 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_35 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_36 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_39 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_40 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_41 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_42 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_43 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_44 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_45 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_46 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_47 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_48 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_49 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_50 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_51 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_52 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_53 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_54 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_56 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_57 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_58 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_59 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_60 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_61 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_64 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_65 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_66 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_67 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_68 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_69 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_70 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_71 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_72 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_73 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_75 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_76 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_78 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_79 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_80 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.0 Search vendor "Liferay" for product "Dxp" and version "7.0" | fix_pack_81 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | - |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_1 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_10 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_11 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_12 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_13 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_14 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_15 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_16 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_2 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_3 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_4 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_5 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_6 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_7 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_8 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.1 Search vendor "Liferay" for product "Dxp" and version "7.1" | fix_pack_9 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.2 Search vendor "Liferay" for product "Dxp" and version "7.2" | - |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.2 Search vendor "Liferay" for product "Dxp" and version "7.2" | fix_pack_1 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.2 Search vendor "Liferay" for product "Dxp" and version "7.2" | fix_pack_2 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Dxp Search vendor "Liferay" for product "Dxp" | 7.2 Search vendor "Liferay" for product "Dxp" and version "7.2" | fix_pack_3 |
Affected
| ||||||
| Liferay Search vendor "Liferay" | Liferay Portal Search vendor "Liferay" for product "Liferay Portal" | < 7.3.0 Search vendor "Liferay" for product "Liferay Portal" and version " < 7.3.0" | - |
Affected
| ||||||