Lucene search
PRIOn knowledge basePRION:CVE-2021-33321HistoryAug 03, 2021 - 7:15 p.m.
Default configuration
2021-08-0319:15:00
PRIOn knowledge base
www.prio-n.com
2
Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dxp | lt | 7.3 | |
| liferay_portal | ge | 6.2.3 | |
| liferay_portal | lt | 7.3.3 |
Related
nvd
nvd
CVE-2021-33321
2021-08-03 19:15:08
cnvd
cnvd
Liferay Portal and Liferay DXP Licensing Issue Vulnerability
2021-08-05 00:00:00
osv
osv
CVE-2021-33321
2021-08-03 19:15:08
cvelist
cvelist
CVE-2021-33321
2021-08-03 18:12:26
cve
cve
CVE-2021-33321
2021-08-03 19:15:08