Privilege Escalation

2022-04-2011:43:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

35.3%

JSON

com.liferay.portal is vulnerable to privilege escalation. Remote authenticated attackers are able to gain access to view sensitive user information by accessing a list of sites and groups via the site membership assignment UI, due to improper validations of user permissions.

CPENameOperatorVersion
liferay portal implle5.34.3
liferay portal implle4.38.3
liferay portal implle7.7.8
liferay portal implle1.0.1
liferay portal implle6.3.5
liferay portal implle2.78.1
liferay portal implle3.66.0
liferay portal implle7.0.0-nightly
liferay portal implle5.34.3
liferay portal implle4.38.3

Name	Operator	Version
liferay portal impl	le	5.34.3
liferay portal impl	le	4.38.3
liferay portal impl	le	7.7.8
liferay portal impl	le	1.0.1
liferay portal impl	le	6.3.5
liferay portal impl	le	2.78.1
liferay portal impl	le	3.66.0
liferay portal impl	le	7.0.0-nightly
liferay portal impl	le	5.34.3
liferay portal impl	le	4.38.3