Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_3"
},
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_1"
},
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_2"
},
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_3"
},
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_1"
},
{
"introduced": "0"
},
{
"fixed": "7.3.0"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_25"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_26"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_27"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_28"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_30"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_33"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_35"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_36"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_39"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_40"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_41"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_42"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_43"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_44"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_45"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_46"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_47"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_48"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_49"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_50"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_51"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_52"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_53"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_54"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_56"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_57"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_58"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_59"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_60"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_61"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_64"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_65"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_66"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_67"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_68"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_69"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_70"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_71"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_72"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_73"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_75"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_76"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_78"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_79"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_80"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0-fix_pack_81"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_11"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_13"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_14"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_16"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_8"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.1-fix_pack_9"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-NA"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.2-fix_pack_3"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15841.json"