CVE-2021-29038

The Liferay Portal and Liferay DXP platforms are vulnerable to an information disclosure issue where password reminder answers are not obfuscated on the page. This allows attackers to steal these answers via man-in-the-middle or shoulder surfing attacks. Affected versions include Liferay Portal 7...