CVE Vulnerabilities

CVE-2020-15841

Published: Jul 20, 2020 | Modified: May 13, 2025
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP servers password via the Test LDAP Connection feature.

Affected Software 

Name Vendor Start Version End Version
Digital_experience_platform Liferay 7.0 (including) 7.0 (including)
Digital_experience_platform Liferay 7.0-fix_pack_13 (including) 7.0-fix_pack_13 (including)
Digital_experience_platform Liferay 7.0-fix_pack_14 (including) 7.0-fix_pack_14 (including)
Digital_experience_platform Liferay 7.0-fix_pack_24 (including) 7.0-fix_pack_24 (including)
Digital_experience_platform Liferay 7.0-fix_pack_25 (including) 7.0-fix_pack_25 (including)
Digital_experience_platform Liferay 7.0-fix_pack_26 (including) 7.0-fix_pack_26 (including)
Digital_experience_platform Liferay 7.0-fix_pack_27 (including) 7.0-fix_pack_27 (including)
Digital_experience_platform Liferay 7.0-fix_pack_28 (including) 7.0-fix_pack_28 (including)
Digital_experience_platform Liferay 7.0-fix_pack_3 (including) 7.0-fix_pack_3 (including)
Digital_experience_platform Liferay 7.0-fix_pack_30 (including) 7.0-fix_pack_30 (including)
Digital_experience_platform Liferay 7.0-fix_pack_33 (including) 7.0-fix_pack_33 (including)
Digital_experience_platform Liferay 7.0-fix_pack_35 (including) 7.0-fix_pack_35 (including)
Digital_experience_platform Liferay 7.0-fix_pack_36 (including) 7.0-fix_pack_36 (including)
Digital_experience_platform Liferay 7.0-fix_pack_39 (including) 7.0-fix_pack_39 (including)
Digital_experience_platform Liferay 7.0-fix_pack_40 (including) 7.0-fix_pack_40 (including)
Digital_experience_platform Liferay 7.0-fix_pack_41 (including) 7.0-fix_pack_41 (including)
Digital_experience_platform Liferay 7.0-fix_pack_42 (including) 7.0-fix_pack_42 (including)
Digital_experience_platform Liferay 7.0-fix_pack_43 (including) 7.0-fix_pack_43 (including)
Digital_experience_platform Liferay 7.0-fix_pack_44 (including) 7.0-fix_pack_44 (including)
Digital_experience_platform Liferay 7.0-fix_pack_45 (including) 7.0-fix_pack_45 (including)
Digital_experience_platform Liferay 7.0-fix_pack_46 (including) 7.0-fix_pack_46 (including)
Digital_experience_platform Liferay 7.0-fix_pack_47 (including) 7.0-fix_pack_47 (including)
Digital_experience_platform Liferay 7.0-fix_pack_48 (including) 7.0-fix_pack_48 (including)
Digital_experience_platform Liferay 7.0-fix_pack_49 (including) 7.0-fix_pack_49 (including)
Digital_experience_platform Liferay 7.0-fix_pack_50 (including) 7.0-fix_pack_50 (including)
Digital_experience_platform Liferay 7.0-fix_pack_51 (including) 7.0-fix_pack_51 (including)
Digital_experience_platform Liferay 7.0-fix_pack_52 (including) 7.0-fix_pack_52 (including)
Digital_experience_platform Liferay 7.0-fix_pack_53 (including) 7.0-fix_pack_53 (including)
Digital_experience_platform Liferay 7.0-fix_pack_54 (including) 7.0-fix_pack_54 (including)
Digital_experience_platform Liferay 7.0-fix_pack_56 (including) 7.0-fix_pack_56 (including)
Digital_experience_platform Liferay 7.0-fix_pack_57 (including) 7.0-fix_pack_57 (including)
Digital_experience_platform Liferay 7.0-fix_pack_58 (including) 7.0-fix_pack_58 (including)
Digital_experience_platform Liferay 7.0-fix_pack_59 (including) 7.0-fix_pack_59 (including)
Digital_experience_platform Liferay 7.0-fix_pack_60 (including) 7.0-fix_pack_60 (including)
Digital_experience_platform Liferay 7.0-fix_pack_61 (including) 7.0-fix_pack_61 (including)
Digital_experience_platform Liferay 7.0-fix_pack_64 (including) 7.0-fix_pack_64 (including)
Digital_experience_platform Liferay 7.0-fix_pack_65 (including) 7.0-fix_pack_65 (including)
Digital_experience_platform Liferay 7.0-fix_pack_66 (including) 7.0-fix_pack_66 (including)
Digital_experience_platform Liferay 7.0-fix_pack_67 (including) 7.0-fix_pack_67 (including)
Digital_experience_platform Liferay 7.0-fix_pack_68 (including) 7.0-fix_pack_68 (including)
Digital_experience_platform Liferay 7.0-fix_pack_69 (including) 7.0-fix_pack_69 (including)
Digital_experience_platform Liferay 7.0-fix_pack_70 (including) 7.0-fix_pack_70 (including)
Digital_experience_platform Liferay 7.0-fix_pack_71 (including) 7.0-fix_pack_71 (including)
Digital_experience_platform Liferay 7.0-fix_pack_72 (including) 7.0-fix_pack_72 (including)
Digital_experience_platform Liferay 7.0-fix_pack_73 (including) 7.0-fix_pack_73 (including)
Digital_experience_platform Liferay 7.0-fix_pack_75 (including) 7.0-fix_pack_75 (including)
Digital_experience_platform Liferay 7.0-fix_pack_76 (including) 7.0-fix_pack_76 (including)
Digital_experience_platform Liferay 7.0-fix_pack_78 (including) 7.0-fix_pack_78 (including)
Digital_experience_platform Liferay 7.0-fix_pack_79 (including) 7.0-fix_pack_79 (including)
Digital_experience_platform Liferay 7.0-fix_pack_80 (including) 7.0-fix_pack_80 (including)
Digital_experience_platform Liferay 7.0-fix_pack_81 (including) 7.0-fix_pack_81 (including)
Digital_experience_platform Liferay 7.1 (including) 7.1 (including)
Digital_experience_platform Liferay 7.1-fix_pack_1 (including) 7.1-fix_pack_1 (including)
Digital_experience_platform Liferay 7.1-fix_pack_10 (including) 7.1-fix_pack_10 (including)
Digital_experience_platform Liferay 7.1-fix_pack_11 (including) 7.1-fix_pack_11 (including)
Digital_experience_platform Liferay 7.1-fix_pack_12 (including) 7.1-fix_pack_12 (including)
Digital_experience_platform Liferay 7.1-fix_pack_13 (including) 7.1-fix_pack_13 (including)
Digital_experience_platform Liferay 7.1-fix_pack_14 (including) 7.1-fix_pack_14 (including)
Digital_experience_platform Liferay 7.1-fix_pack_15 (including) 7.1-fix_pack_15 (including)
Digital_experience_platform Liferay 7.1-fix_pack_16 (including) 7.1-fix_pack_16 (including)
Digital_experience_platform Liferay 7.1-fix_pack_2 (including) 7.1-fix_pack_2 (including)
Digital_experience_platform Liferay 7.1-fix_pack_3 (including) 7.1-fix_pack_3 (including)
Digital_experience_platform Liferay 7.1-fix_pack_4 (including) 7.1-fix_pack_4 (including)
Digital_experience_platform Liferay 7.1-fix_pack_5 (including) 7.1-fix_pack_5 (including)
Digital_experience_platform Liferay 7.1-fix_pack_6 (including) 7.1-fix_pack_6 (including)
Digital_experience_platform Liferay 7.1-fix_pack_7 (including) 7.1-fix_pack_7 (including)
Digital_experience_platform Liferay 7.1-fix_pack_8 (including) 7.1-fix_pack_8 (including)
Digital_experience_platform Liferay 7.1-fix_pack_9 (including) 7.1-fix_pack_9 (including)
Digital_experience_platform Liferay 7.2 (including) 7.2 (including)
Digital_experience_platform Liferay 7.2-fix_pack_1 (including) 7.2-fix_pack_1 (including)
Digital_experience_platform Liferay 7.2-fix_pack_2 (including) 7.2-fix_pack_2 (including)
Digital_experience_platform Liferay 7.2-fix_pack_3 (including) 7.2-fix_pack_3 (including)
Liferay_portal Liferay * 7.3.0 (excluding)

References