CVE-2021-38266

The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from authenticating by attempting to sign ...

CVE-2021-38266

The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from authenticating by attempting to sign ...

CVE-2021-38266

The CVE-2021-38266 issue affects the Portal Security module in Liferay Portal up to version 7.2.1 and Liferay DXP up to 7.2 (and older 7.0/7.1) where LDAP user import can fail, enabling remote attackers to prevent a legitimate user from authenticating by signing in as an LDAP user.根 The root caus...