Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-33325

🗓️ 03 Aug 2021 19:15:08Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 23 Views

The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Liferay DXP 7.0 before fix pack 93, 7.1 before fix pack 19, and 7.2 before fix pack 7, stores user's clear text passwords in the database if workflow is enabled for user creation, allowing attackers to obtain passwords

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2021-33325
3 Aug 202119:15
–attackerkb
CNNVD		Liferay Portal 和 Liferay DXP 安全漏洞
3 Aug 202100:00
–cnnvd
CNVD		Liferay Portal and Liferay DXP have unspecified vulnerabilities (CNVD-2021-62968)
5 Aug 202100:00
–cnvd
CVE		CVE-2021-33325
3 Aug 202118:33
–cve
Cvelist		CVE-2021-33325
3 Aug 202118:33
–cvelist
EUVD		EUVD-2021-20034
7 Oct 202500:30
–euvd
Github Security Blog		Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
24 May 202219:09
–github
OSV		GHSA-6C88-GVXW-F5HG Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
24 May 202219:09
–osv
Prion		Default credentials
3 Aug 202119:15
–prion
RedhatCVE		CVE-2021-33325
9 Jan 202611:28
–redhatcve
Rows per page
NVD
Node
OR
liferaydigital_experience_platformMatch7.0-
liferaydigital_experience_platformMatch7.0fix_pack_13
liferaydigital_experience_platformMatch7.0fix_pack_14
liferaydigital_experience_platformMatch7.0fix_pack_24
liferaydigital_experience_platformMatch7.0fix_pack_25
liferaydigital_experience_platformMatch7.0fix_pack_26
liferaydigital_experience_platformMatch7.0fix_pack_27
liferaydigital_experience_platformMatch7.0fix_pack_28
liferaydigital_experience_platformMatch7.0fix_pack_3
liferaydigital_experience_platformMatch7.0fix_pack_30
liferaydigital_experience_platformMatch7.0fix_pack_33
liferaydigital_experience_platformMatch7.0fix_pack_35
liferaydigital_experience_platformMatch7.0fix_pack_36
liferaydigital_experience_platformMatch7.0fix_pack_39
liferaydigital_experience_platformMatch7.0fix_pack_40
liferaydigital_experience_platformMatch7.0fix_pack_41
liferaydigital_experience_platformMatch7.0fix_pack_42
liferaydigital_experience_platformMatch7.0fix_pack_43
liferaydigital_experience_platformMatch7.0fix_pack_44
liferaydigital_experience_platformMatch7.0fix_pack_45
liferaydigital_experience_platformMatch7.0fix_pack_46
liferaydigital_experience_platformMatch7.0fix_pack_47
liferaydigital_experience_platformMatch7.0fix_pack_48
liferaydigital_experience_platformMatch7.0fix_pack_49
liferaydigital_experience_platformMatch7.0fix_pack_50
liferaydigital_experience_platformMatch7.0fix_pack_51
liferaydigital_experience_platformMatch7.0fix_pack_52
liferaydigital_experience_platformMatch7.0fix_pack_53
liferaydigital_experience_platformMatch7.0fix_pack_54
liferaydigital_experience_platformMatch7.0fix_pack_56
liferaydigital_experience_platformMatch7.0fix_pack_57
liferaydigital_experience_platformMatch7.0fix_pack_58
liferaydigital_experience_platformMatch7.0fix_pack_59
liferaydigital_experience_platformMatch7.0fix_pack_60
liferaydigital_experience_platformMatch7.0fix_pack_61
liferaydigital_experience_platformMatch7.0fix_pack_64
liferaydigital_experience_platformMatch7.0fix_pack_65
liferaydigital_experience_platformMatch7.0fix_pack_66
liferaydigital_experience_platformMatch7.0fix_pack_67
liferaydigital_experience_platformMatch7.0fix_pack_68
liferaydigital_experience_platformMatch7.0fix_pack_69
liferaydigital_experience_platformMatch7.0fix_pack_70
liferaydigital_experience_platformMatch7.0fix_pack_71
liferaydigital_experience_platformMatch7.0fix_pack_72
liferaydigital_experience_platformMatch7.0fix_pack_73
liferaydigital_experience_platformMatch7.0fix_pack_75
liferaydigital_experience_platformMatch7.0fix_pack_76
liferaydigital_experience_platformMatch7.0fix_pack_78
liferaydigital_experience_platformMatch7.0fix_pack_79
liferaydigital_experience_platformMatch7.0fix_pack_80
liferaydigital_experience_platformMatch7.0fix_pack_81
liferaydigital_experience_platformMatch7.0fix_pack_82
liferaydigital_experience_platformMatch7.0fix_pack_83
liferaydigital_experience_platformMatch7.0fix_pack_84
liferaydigital_experience_platformMatch7.0fix_pack_85
liferaydigital_experience_platformMatch7.0fix_pack_86
liferaydigital_experience_platformMatch7.0fix_pack_87
liferaydigital_experience_platformMatch7.0fix_pack_88
liferaydigital_experience_platformMatch7.0fix_pack_89
liferaydigital_experience_platformMatch7.0fix_pack_90
liferaydigital_experience_platformMatch7.0fix_pack_91
liferaydigital_experience_platformMatch7.0fix_pack_92
liferaydigital_experience_platformMatch7.1-
liferaydigital_experience_platformMatch7.1fix_pack_1
liferaydigital_experience_platformMatch7.1fix_pack_10
liferaydigital_experience_platformMatch7.1fix_pack_11
liferaydigital_experience_platformMatch7.1fix_pack_12
liferaydigital_experience_platformMatch7.1fix_pack_13
liferaydigital_experience_platformMatch7.1fix_pack_14
liferaydigital_experience_platformMatch7.1fix_pack_15
liferaydigital_experience_platformMatch7.1fix_pack_16
liferaydigital_experience_platformMatch7.1fix_pack_17
liferaydigital_experience_platformMatch7.1fix_pack_18
liferaydigital_experience_platformMatch7.1fix_pack_2
liferaydigital_experience_platformMatch7.1fix_pack_3
liferaydigital_experience_platformMatch7.1fix_pack_4
liferaydigital_experience_platformMatch7.1fix_pack_5
liferaydigital_experience_platformMatch7.1fix_pack_6
liferaydigital_experience_platformMatch7.1fix_pack_7
liferaydigital_experience_platformMatch7.1fix_pack_8
liferaydigital_experience_platformMatch7.1fix_pack_9
liferaydigital_experience_platformMatch7.2-
liferaydigital_experience_platformMatch7.2fix_pack_1
liferaydigital_experience_platformMatch7.2fix_pack_2
liferaydigital_experience_platformMatch7.2fix_pack_3
liferaydigital_experience_platformMatch7.2fix_pack_4
liferaydigital_experience_platformMatch7.2fix_pack_5
liferaydigital_experience_platformMatch7.2fix_pack_6
liferayliferay_portalRange<7.3.3

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 03:54Current
CVSS 24
CVSS 3.14.9
EPSS0.00568
CWE-312
cve-2021-33325liferay portalclear text passwordsdatabaseuser creationattackersaccess
23