Information Disclosure

2020-06-1102:44:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

48.1%

JSON

com.liferay.dynamic.data.mapping.service is vulnerable to information disclosure. The vulnerability exists as it does not remove authentication data in the response sent by the DDMDataProvider API.

CPENameOperatorVersion
com.liferay.dynamic.data.mapping.servicele4.0.66
com.liferay.dynamic.data.mapping.servicele3.0.93
com.liferay.dynamic.data.mapping.servicele5.0.18
com.liferay.dynamic.data.mapping.servicele2.7.4

Name	Operator	Version
com.liferay.dynamic.data.mapping.service	le	4.0.66
com.liferay.dynamic.data.mapping.service	le	3.0.93
com.liferay.dynamic.data.mapping.service	le	5.0.18
com.liferay.dynamic.data.mapping.service	le	2.7.4