Lucene search
PRIOn knowledge basePRION:CVE-2023-47798HistoryFeb 08, 2024 - 3:15 a.m.
Code injection
2024-02-0803:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
liferay portal
remote authenticated users
account lockout
user sessions
Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pack 5, and older unsupported versions does not invalidate existing user sessions, which allows remote authenticated users to remain authenticated after an account has been locked.
Related
cve
cve
CVE-2023-47798
2024-02-08 03:15:07
osv
osv
Liferay Portal's account lockout does not invalidate existing user sessions
2024-02-08 03:32:45
cvelist
cvelist
CVE-2023-47798
2024-02-08 02:55:43
nvd
nvd
CVE-2023-47798
2024-02-08 03:15:07
github
github
Liferay Portal's account lockout does not invalidate existing user sessions
2024-02-08 03:32:45