Lucene search
PRIOn knowledge basePRION:CVE-2020-15842HistoryJul 20, 2020 - 2:15 a.m.
Deserialization of untrusted data
2020-07-2002:15:00
PRIOn knowledge base
www.prio-n.com
3
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dxp | eq | 7.0 fixpack81 | |
| dxp | eq | 7.0 fixpack13 | |
| dxp | eq | 7.0 fixpack14 | |
| dxp | eq | 7.0 fixpack24 | |
| dxp | eq | 7.0 fixpack25 | |
| dxp | eq | 7.0 fixpack26 | |
| dxp | eq | 7.0 fixpack27 | |
| dxp | eq | 7.0 fixpack28 | |
| dxp | eq | 7.0 fixpack3 | |
| dxp | eq | 7.0 fixpack30 |
Related
cvelist
cvelist
CVE-2020-15842
2020-07-20 01:06:54
nvd
nvd
CVE-2020-15842
2020-07-20 02:15:11
osv
osv
CVE-2020-15842
2020-07-20 02:15:11
cve
cve
CVE-2020-15842
2020-07-20 02:15:11
nessus
nessus
Liferay Portal Insecure Deserialization (CST-7213)
2021-06-25 00:00:00
openvas
openvas
Liferay Portal <= 7.1.3, 7.2.x <= 7.2.1 Multiple Vulnerabilities
2020-07-24 00:00:00