Incorrect Default Permissions

Overview com.liferay.portal:portal-impl is a Portal Impl Affected versions of this package are vulnerable to Incorrect Default Permissions due to insecure default settings in the auth.login.prompt.enabled configuration. An attacker can obtain sensitive information such as usernames, site names, a...

PT-2022-25851 · Liferay · Liferay Portal

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.0.0 through 7.4.2 Description: The issue is related to an insecure default in the auth.login.prompt.enabled component, which allows attackers to enumerate usernames, site names, and pages. Recommendations: For Lifera...