GSD-2024-25146

Vulnerability from gsd - Updated: 2024-02-07 06:03
Details
Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the site, which allows remote attackers to discover the existence of sites by enumerating URLs. This vulnerability occurs if locale.prepend.friendly.url.style=2 and if a custom 404 page is used.
Aliases
To clipboard 

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-25146"
      ],
      "details": "Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the site, which allows remote attackers to discover the existence of sites by enumerating URLs. This vulnerability occurs if locale.prepend.friendly.url.style=2 and if a custom 404 page is used.",
      "id": "GSD-2024-25146",
      "modified": "2024-02-07T06:03:41.547911Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@liferay.com",
        "ID": "CVE-2024-25146",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Portal",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "7.2.0",
                          "version_value": "7.4.1"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "DXP",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "7.3.10",
                          "version_value": "7.3.10-dxp-2"
                        },
                        {
                          "version_affected": "\u003c=",
                          "version_name": "7.2.10",
                          "version_value": "7.2.10-dxp-17"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Liferay"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the site, which allows remote attackers to discover the existence of sites by enumerating URLs. This vulnerability occurs if locale.prepend.friendly.url.style=2 and if a custom 404 page is used."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.1.0-dev"
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-204",
                "lang": "eng",
                "value": "CWE-204 Observable Response Discrepancy"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25146",
            "refsource": "MISC",
            "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25146"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:-:*:*:*:*:*:*",
                    "matchCriteriaId": "8CAAE1B7-982E-4D50-9651-DEEE6CD74EED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_1:*:*:*:*:*:*",
                    "matchCriteriaId": "AFCF99EC-3384-418D-A419-B9DB607BE371",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_10:*:*:*:*:*:*",
                    "matchCriteriaId": "F7CAAF53-AA8E-48CB-9398-35461BE590C4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_11:*:*:*:*:*:*",
                    "matchCriteriaId": "6FB8482E-644B-4DA5-808B-8DBEAB6D8D09",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_12:*:*:*:*:*:*",
                    "matchCriteriaId": "95EFE8B5-EE95-4186-AC89-E9AFD8649D01",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_13:*:*:*:*:*:*",
                    "matchCriteriaId": "90A6E0AF-0B8A-462D-95EF-2239EEE4A50D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_14:*:*:*:*:*:*",
                    "matchCriteriaId": "48BBAE90-F668-49BF-89AF-2C9547B76836",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_15:*:*:*:*:*:*",
                    "matchCriteriaId": "74FAF597-EAAD-4BB5-AB99-8129476A7E89",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_16:*:*:*:*:*:*",
                    "matchCriteriaId": "20F078A3-A3EE-4CCA-816D-3C053E7D7FE3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_17:*:*:*:*:*:*",
                    "matchCriteriaId": "C33EBD80-91DD-401C-9337-171C07B5D489",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_2:*:*:*:*:*:*",
                    "matchCriteriaId": "31E05134-A0C5-4937-A228-7D0884276B67",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_3:*:*:*:*:*:*",
                    "matchCriteriaId": "3F06C4AD-FD20-4345-8386-0895312F0A00",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_4:*:*:*:*:*:*",
                    "matchCriteriaId": "98CC25E2-EC3D-43A2-8D03-06F0E804EA63",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_5:*:*:*:*:*:*",
                    "matchCriteriaId": "30933C36-C710-488F-9601-EE1BB749C58A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_6:*:*:*:*:*:*",
                    "matchCriteriaId": "41E94372-A1AE-48B1-82DC-08B7B616473F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_7:*:*:*:*:*:*",
                    "matchCriteriaId": "51FBC8E0-34F8-475C-A1A8-571791CA05F9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_8:*:*:*:*:*:*",
                    "matchCriteriaId": "1E73EAEA-FA88-46B9-B9D5-A41603957AD7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.2:fix_pack_9:*:*:*:*:*:*",
                    "matchCriteriaId": "CF9BC654-4E3F-4B40-A6E5-79A818A51BED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.3:-:*:*:*:*:*:*",
                    "matchCriteriaId": "21C55D41-DB66-494D-BEEB-BDAC7CB4B31B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.3:sp1:*:*:*:*:*:*",
                    "matchCriteriaId": "9D75A0FF-BAEA-471A-87B2-8EC2A9F0A6B5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:dxp:7.3:sp2:*:*:*:*:*:*",
                    "matchCriteriaId": "D86CDCC0-9655-477B-83FA-ADDBB5AF43A2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F247D45A-D3E4-4EDD-A18D-147FFBEF0935",
                    "versionEndIncluding": "7.4.1",
                    "versionStartIncluding": "7.2.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": "Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the site, which allows remote attackers to discover the existence of sites by enumerating URLs. This vulnerability occurs if locale.prepend.friendly.url.style=2 and if a custom 404 page is used."
          },
          {
            "lang": "es",
            "value": "Liferay Portal 7.2.0 a 7.4.1 y versiones anteriores no compatibles, y Liferay DXP 7.3 anterior al service pack 3, 7.2 anterior al fix pack 18 y versiones anteriores no compatibles devuelven respuestas diferentes dependiendo de si un sitio no existe o si el usuario no tiene permiso para acceder al sitio, lo que permite a atacantes remotos descubrir la existencia de sitios enumerando las URL. Esta vulnerabilidad ocurre si locale.prepend.friendly.url.style=2 y si se utiliza una p\u00e1gina 404 personalizada."
          }
        ],
        "id": "CVE-2024-25146",
        "lastModified": "2024-02-15T04:37:12.337",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "security@liferay.com",
              "type": "Secondary"
            }
          ]
        },
        "published": "2024-02-08T04:15:08.040",
        "references": [
          {
            "source": "security@liferay.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25146"
          }
        ],
        "sourceIdentifier": "security@liferay.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-203"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-204"
              }
            ],
            "source": "security@liferay.com",
            "type": "Secondary"
          }
        ]
      }
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.