EUVD-2022-45209

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Liferay Portal exposes LDAP credentials in URLs, risking man-in-the-middle attacks on users.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-42132	16 Nov 202207:54	–	circl
CNNVD	Liferay Portal和Liferay DXP 信息泄露漏洞	14 Nov 202200:00	–	cnnvd
CVE	CVE-2022-42132	15 Nov 202200:00	–	cve
Cvelist	CVE-2022-42132	15 Nov 202200:00	–	cvelist
Github Security Blog	Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL	15 Nov 202212:00	–	github
NVD	CVE-2022-42132	15 Nov 202202:15	–	nvd
OSV	BIT-LIFERAY-2022-42132	31 Jan 202415:19	–	osv
OSV	CVE-2022-42132	15 Nov 202202:15	–	osv
OSV	GHSA-F43M-HHJ4-Q3JG Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL	15 Nov 202212:00	–	osv
Prion	Cross site request forgery (csrf)	15 Nov 202202:15	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "c8809600-53e6-3693-b5bc-22e89c8e2524",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "58167b75-b178-35dc-8607-d8663927bd1a",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
liferay	www.liferay.com/
portal	www.portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42132
issues	www.issues.liferay.com/browse/LPE-17438
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-42132
github	www.github.com/liferay/liferay-portal/commit/4a53b64fb714c7ff989b99ddccc3de116095453d
github	www.github.com/liferay/liferay-portal/commit/b6cff511119d71dea38f5485761730f4fb5d4430
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-42132
web	www.web.archive.org/web/20221020134303/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42132

03 Oct 2025 20:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.9

EPSS0.00328

SSVC