CVE-2020-15841

Published: 2020-07-20T02:15Z

Last Modified: 2024-11-21T05:06Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt