CVE-2021-33335 (GCVE-0-2021-33335)
Vulnerability from cvelistv5 – Published: 2021-08-03 21:03 – Updated: 2024-08-03 23:50
VLAI?
Summary
Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T23:50:42.962Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://issues.liferay.com/browse/LPE-17103"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-08-03T21:03:38",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://issues.liferay.com/browse/LPE-17103"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-33335",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906",
"refsource": "CONFIRM",
"url": "https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906"
},
{
"name": "https://issues.liferay.com/browse/LPE-17103",
"refsource": "CONFIRM",
"url": "https://issues.liferay.com/browse/LPE-17103"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2021-33335",
"datePublished": "2021-08-03T21:03:38",
"dateReserved": "2021-05-20T00:00:00",
"dateUpdated": "2024-08-03T23:50:42.962Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"C2AA7E18-A41B-4F0D-A04F-57C5745D091B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_1:*:*:*:*:*:*\", \"matchCriteriaId\": \"392B783D-620D-4C71-AAA0-848B16964A27\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_10:*:*:*:*:*:*\", \"matchCriteriaId\": \"4F5A94E2-22B7-4D2D-A491-29F395E727C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_11:*:*:*:*:*:*\", \"matchCriteriaId\": \"E9B10908-C42B-4763-9D47-236506B0E84A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_12:*:*:*:*:*:*\", \"matchCriteriaId\": \"CF544435-36AC-49B8-BA50-A6B6D1678BBC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_13:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D265542-5333-4CCD-90E5-B5F6A55F9863\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_14:*:*:*:*:*:*\", \"matchCriteriaId\": \"1763CD8B-3ACD-4617-A1CA-B9F77A074977\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_15:*:*:*:*:*:*\", \"matchCriteriaId\": \"F25C66AA-B60D-413C-A848-51E12D6080AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_16:*:*:*:*:*:*\", \"matchCriteriaId\": \"071A0D53-EC95-4B18-9FA3-55208B1F7B94\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_17:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC26A9D4-14D6-46B1-BB00-A2C4386EBCA4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_18:*:*:*:*:*:*\", \"matchCriteriaId\": \"350CDEDA-9A20-4BC3-BEAE-8346CED10CD6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_19:*:*:*:*:*:*\", \"matchCriteriaId\": \"10C6107E-79B3-4672-B3E5-8A2FA9A829CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_2:*:*:*:*:*:*\", \"matchCriteriaId\": \"3233D306-3F8E-40A4-B132-7264E63DD131\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_3:*:*:*:*:*:*\", \"matchCriteriaId\": \"9EAEA45A-0370-475E-B4CB-395A434DC3A1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_4:*:*:*:*:*:*\", \"matchCriteriaId\": \"39310F05-1DB6-43BA-811C-9CB91D6DCF20\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_5:*:*:*:*:*:*\", \"matchCriteriaId\": \"D6135B16-C89E-4F49-BA15-823E2AF26D68\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_6:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC887BEC-915B-44AC-B473-5448B3D8DCF7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_7:*:*:*:*:*:*\", \"matchCriteriaId\": \"D7A7CC60-C294-41EC-B000-D15AAA93A3D5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_8:*:*:*:*:*:*\", \"matchCriteriaId\": \"022132F8-6E56-4A29-95D6-3B7861D39CDF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.1:fix_pack_9:*:*:*:*:*:*\", \"matchCriteriaId\": \"651DA9B7-9C11-47A7-AF5C-95625C8FFF6A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"8CAAE1B7-982E-4D50-9651-DEEE6CD74EED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_1:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFCF99EC-3384-418D-A419-B9DB607BE371\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_2:*:*:*:*:*:*\", \"matchCriteriaId\": \"31E05134-A0C5-4937-A228-7D0884276B67\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_3:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F06C4AD-FD20-4345-8386-0895312F0A00\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_4:*:*:*:*:*:*\", \"matchCriteriaId\": \"98CC25E2-EC3D-43A2-8D03-06F0E804EA63\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_5:*:*:*:*:*:*\", \"matchCriteriaId\": \"30933C36-C710-488F-9601-EE1BB749C58A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_6:*:*:*:*:*:*\", \"matchCriteriaId\": \"41E94372-A1AE-48B1-82DC-08B7B616473F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_7:*:*:*:*:*:*\", \"matchCriteriaId\": \"51FBC8E0-34F8-475C-A1A8-571791CA05F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:dxp:7.2:fix_pack_8:*:*:*:*:*:*\", \"matchCriteriaId\": \"1E73EAEA-FA88-46B9-B9D5-A41603957AD7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"7.0.3\", \"versionEndExcluding\": \"7.3.5\", \"matchCriteriaId\": \"00C7CB5F-BB2C-4D9A-8AEF-1DA5AD3E307F\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad de escalada de privilegios en Liferay Portal versiones 7.0.3 hasta 7.3.4, y Liferay DXP versiones 7.1 anteriores a fix pack 20, y versiones 7.2 anteriores a fix pack 9, permite a usuarios autenticados remotos con permiso para actualizar y editar a usuarios tomar el control de una cuenta de usuario de administrador de la empresa al editar al usuario administrador de la empresa\"}]",
"id": "CVE-2021-33335",
"lastModified": "2024-11-21T06:08:43.100",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:P/I:P/A:P\", \"baseScore\": 6.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2021-08-03T22:15:09.137",
"references": "[{\"url\": \"https://issues.liferay.com/browse/LPE-17103\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://issues.liferay.com/browse/LPE-17103\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-863\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-33335\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2021-08-03T22:15:09.137\",\"lastModified\":\"2025-05-13T18:17:51.450\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de escalada de privilegios en Liferay Portal versiones 7.0.3 hasta 7.3.4, y Liferay DXP versiones 7.1 anteriores a fix pack 20, y versiones 7.2 anteriores a fix pack 9, permite a usuarios autenticados remotos con permiso para actualizar y editar a usuarios tomar el control de una cuenta de usuario de administrador de la empresa al editar al usuario administrador de la empresa\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.2,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:P/A:P\",\"baseScore\":6.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"27DF695E-B890-42C2-8941-5BB53154755F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"072F6C59-3D86-48D1-A14E-477FFFA3B1D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_10:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE68B4A2-3459-4DBA-8BAC-E9AA9FA25264\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_11:*:*:*:*:*:*\",\"matchCriteriaId\":\"680D7963-1393-4E86-A65F-D4463D532120\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_12:*:*:*:*:*:*\",\"matchCriteriaId\":\"D81E73DD-FD21-4082-A883-34422AE6C024\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_13:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6DD0451-98EA-4140-8294-77A14F063E2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_14:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE94E76B-8CC2-4E91-B7A3-EEBCC1358FF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_15:*:*:*:*:*:*\",\"matchCriteriaId\":\"408BD438-E15C-422F-9612-C62A7387FC63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_16:*:*:*:*:*:*\",\"matchCriteriaId\":\"A78C8B1C-39CB-4C27-B57C-0AF5E7EB50D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_17:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AB19E97-BACE-4FCC-A53F-078D61A7A9E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_18:*:*:*:*:*:*\",\"matchCriteriaId\":\"D18ACD28-9182-435C-A30F-DF3BFE13C39A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_19:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFE4CC72-C15A-40DE-AFF4-0B6B79BFB2BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"386F0E26-78DC-4D59-A20F-B41D0E59561B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"54576481-2AE9-4133-9EFA-B7FBDCA4427D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E29CE810-76D5-4283-B102-70344B6C9506\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_5:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA869467-C560-4130-A180-86819F6A8673\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC0C94B7-31FB-4115-8EDE-62CC459B6663\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_7:*:*:*:*:*:*\",\"matchCriteriaId\":\"07DEAA71-53DA-4508-B7E6-924ABED49E66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"467323F6-5CA7-42A0-9810-C6FA694CEC93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_9:*:*:*:*:*:*\",\"matchCriteriaId\":\"32EFFD8A-1C0D-446B-AAD7-5D23D483D3D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DCF7F39-A198-4F7E-84B7-90C88C1BAA96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7E68DF8-749B-4284-A7C9-929701A86B36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_2:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CECAA19-8B7F-44C8-8059-6D4F2105E196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_3:*:*:*:*:*:*\",\"matchCriteriaId\":\"68CBCEEB-7C28-4769-813F-3F01E33D2E08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_4:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0CB4927-A361-4DFA-BDB8-A454EA2894AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_5:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2B771B7-D5CB-4778-A3A8-1005E4EE134C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B9DB383-3791-4A43-BA4D-7695B203E736\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_7:*:*:*:*:*:*\",\"matchCriteriaId\":\"13F02D77-20E9-4F32-9752-511EB71E6704\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_8:*:*:*:*:*:*\",\"matchCriteriaId\":\"6353CC8F-A6D4-4A0C-8D68-290CD8DEB4F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.3\",\"versionEndExcluding\":\"7.3.5\",\"matchCriteriaId\":\"00C7CB5F-BB2C-4D9A-8AEF-1DA5AD3E307F\"}]}]}],\"references\":[{\"url\":\"https://issues.liferay.com/browse/LPE-17103\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://issues.liferay.com/browse/LPE-17103\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747906\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…