CVE-2021-33335
- Source
- https://cve.org/CVERecord?id=CVE-2021-33335
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33335.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-33335
- Aliases
- Published
- 2021-08-03T22:15:09.137Z
- Modified
- 2026-07-08T06:02:34.151227319Z
- Severity
-
- 7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by editing the company administrator user.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:liferay:digital_experience_platform:7.1:-:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_10:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_11:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_12:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_13:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_14:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_15:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_16:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_17:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_18:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_19:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_1:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_2:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_3:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_4:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_5:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_6:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_7:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_8:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.1:fix_pack_9:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:-:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_1:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_2:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_3:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_4:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_5:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_6:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_7:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.2:fix_pack_8:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "7.1-NA" }, { "last_affected": "7.1-NA" }, { "introduced": "7.1-fix_pack_1" }, { "last_affected": "7.1-fix_pack_1" }, { "introduced": "7.1-fix_pack_10" }, { "last_affected": "7.1-fix_pack_10" }, { "introduced": "7.1-fix_pack_11" }, { "last_affected": "7.1-fix_pack_11" }, { "introduced": "7.1-fix_pack_12" }, { "last_affected": "7.1-fix_pack_12" }, { "introduced": "7.1-fix_pack_13" }, { "last_affected": "7.1-fix_pack_13" }, { "introduced": "7.1-fix_pack_14" }, { "last_affected": "7.1-fix_pack_14" }, { "introduced": "7.1-fix_pack_15" }, { "last_affected": "7.1-fix_pack_15" }, { "introduced": "7.1-fix_pack_16" }, { "last_affected": "7.1-fix_pack_16" }, { "introduced": "7.1-fix_pack_17" }, { "last_affected": "7.1-fix_pack_17" }, { "introduced": "7.1-fix_pack_18" }, { "last_affected": "7.1-fix_pack_18" }, { "introduced": "7.1-fix_pack_19" }, { "last_affected": "7.1-fix_pack_19" }, { "introduced": "7.1-fix_pack_2" }, { "last_affected": "7.1-fix_pack_2" }, { "introduced": "7.1-fix_pack_3" }, { "last_affected": "7.1-fix_pack_3" }, { "introduced": "7.1-fix_pack_4" }, { "last_affected": "7.1-fix_pack_4" }, { "introduced": "7.1-fix_pack_5" }, { "last_affected": "7.1-fix_pack_5" }, { "introduced": "7.1-fix_pack_6" }, { "last_affected": "7.1-fix_pack_6" }, { "introduced": "7.1-fix_pack_7" }, { "last_affected": "7.1-fix_pack_7" }, { "introduced": "7.1-fix_pack_8" }, { "last_affected": "7.1-fix_pack_8" }, { "introduced": "7.1-fix_pack_9" }, { "last_affected": "7.1-fix_pack_9" }, { "introduced": "7.2-NA" }, { "last_affected": "7.2-NA" }, { "introduced": "7.2-fix_pack_1" }, { "last_affected": "7.2-fix_pack_1" }, { "introduced": "7.2-fix_pack_2" }, { "last_affected": "7.2-fix_pack_2" }, { "introduced": "7.2-fix_pack_3" }, { "last_affected": "7.2-fix_pack_3" }, { "introduced": "7.2-fix_pack_4" }, { "last_affected": "7.2-fix_pack_4" }, { "introduced": "7.2-fix_pack_5" }, { "last_affected": "7.2-fix_pack_5" }, { "introduced": "7.2-fix_pack_6" }, { "last_affected": "7.2-fix_pack_6" }, { "introduced": "7.2-fix_pack_7" }, { "last_affected": "7.2-fix_pack_7" }, { "introduced": "7.2-fix_pack_8" }, { "last_affected": "7.2-fix_pack_8" } ], "vendor_product": "liferay:digital_experience_platform" } ] }- References