CVE-2022-41414

published 2022-10-07

CVE-2022-41414: An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
liferay	liferay_portal	7.0.0 – 7.4.2	—

CWE-276