Lucene search

K
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.LIFERAY_PORTAL-CVE-2020-7961.NBIN
HistoryFeb 25, 2021 - 12:00 a.m.

Liferay Portal Remote Code Execution (direct check)

2021-02-2500:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
451

A remote code execution vulnerability exists in Liferay Portal prior to 7.2.1 CE GA2 due to Deserialization of Untrusted Data. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands.

Binary data liferay_portal-cve-2020-7961.nbin
VendorProductVersionCPE
liferayliferay_portalcpe:/a:liferay:liferay_portal