Lucene search
Veracode Vulnerability DatabaseVERACODE:30520HistoryMay 18, 2021 - 5:54 a.m.
Information Disclosure
2021-05-1805:54:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
47.9%
com.liferay.portal.store.s3 is vulnerable to information disclosure. The S3 store’s proxy password is not obfuscated, allowing attackers to steal the password via man-in-the-middle attacks or shoulder surfing.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.liferay.portal.store.s3 | le | 4.0.31 | |
| com.liferay.portal.store.s3 | le | 3.0.48 | |
| com.liferay.portal.store.s3 | le | 2.0.47 |
Related
osv
osv
CVE-2021-29043
2021-05-17 11:15:07
prion
prion
Default credentials
2021-05-17 11:15:00
cvelist
cvelist
CVE-2021-29043
2021-05-17 10:48:12
cve
cve
CVE-2021-29043
2021-05-17 11:15:07
nvd
nvd
CVE-2021-29043
2021-05-17 11:15:07
nessus
nessus
Liferay Portal 7.x <= 7.2.1 / 7.3 < 7.3.6 Multiple Vulnerabilities
2021-07-02 00:00:00