Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Liferay DXP Incorrect Default Permissions Vulnerability - CVE-2021-33327 - Vulnerability Database
Liferay DXP

Liferay DXP Incorrect Default Permissions Vulnerability - CVE-2021-33327

Medium
Reference: CVE-2021-33327
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-33327
Title: Liferay DXP Incorrect Default Permissions Vulnerability
Overview:

The Portlet Configuration module in Liferay Portal 7.2.0 through 7.3.3 and Liferay DXP 7.0 fix pack pack 93 and 94 7.1 fix pack 18 and 7.2 before fix pack 8 does not properly check user permission which allows remote authenticated users to view the Guest and User role even if quotRole Visibilityquot is enabled.