CVE-2024-26268

EPSS 0.53%
Veröffentlicht 20.02.2024 14:15:09
Zuletzt bearbeitet 28.01.2025 21:37:57
Erkennungen
Login

User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 66 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Liferay ≫ Liferay Portal Version <= 7.3.7

Liferay ≫ Liferay Portal Version >= 7.4.0 < 7.4.3.27

Liferay ≫ Digital Experience Platform Version < 7.2

Liferay ≫ Digital Experience Platform Version 7.2 Update -

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_1

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_10

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_11

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_12

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_13

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_14

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_15

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_16

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_17

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_18

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_19

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_2

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_3

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_4

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_5

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_6

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_7

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_8

Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_9

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_1

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_2

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_3

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_4

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_5

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_6

Liferay ≫ Digital Experience Platform Version 7.2 Update service_pack_7

Liferay ≫ Digital Experience Platform Version 7.3 Update -

Liferay ≫ Digital Experience Platform Version 7.3 Update fix_pack_1

Liferay ≫ Digital Experience Platform Version 7.3 Update fix_pack_2

Liferay ≫ Digital Experience Platform Version 7.3 Update service_pack_1

Liferay ≫ Digital Experience Platform Version 7.3 Update service_pack_3

Liferay ≫ Digital Experience Platform Version 7.3 Update update4

Liferay ≫ Digital Experience Platform Version 7.3 Update update5

Liferay ≫ Digital Experience Platform Version 7.3 Update update6

Liferay ≫ Digital Experience Platform Version 7.3 Update update7

Liferay ≫ Digital Experience Platform Version 7.4 Update -

Liferay ≫ Digital Experience Platform Version 7.4 Update update1

Liferay ≫ Digital Experience Platform Version 7.4 Update update10

Liferay ≫ Digital Experience Platform Version 7.4 Update update11

Liferay ≫ Digital Experience Platform Version 7.4 Update update12

Liferay ≫ Digital Experience Platform Version 7.4 Update update13

Liferay ≫ Digital Experience Platform Version 7.4 Update update14

Liferay ≫ Digital Experience Platform Version 7.4 Update update15

Liferay ≫ Digital Experience Platform Version 7.4 Update update16

Liferay ≫ Digital Experience Platform Version 7.4 Update update17

Liferay ≫ Digital Experience Platform Version 7.4 Update update18

Liferay ≫ Digital Experience Platform Version 7.4 Update update19

Liferay ≫ Digital Experience Platform Version 7.4 Update update2

Liferay ≫ Digital Experience Platform Version 7.4 Update update20

Liferay ≫ Digital Experience Platform Version 7.4 Update update21

Liferay ≫ Digital Experience Platform Version 7.4 Update update22

Liferay ≫ Digital Experience Platform Version 7.4 Update update23

Liferay ≫ Digital Experience Platform Version 7.4 Update update24

Liferay ≫ Digital Experience Platform Version 7.4 Update update25

Liferay ≫ Digital Experience Platform Version 7.4 Update update26

Liferay ≫ Digital Experience Platform Version 7.4 Update update3

Liferay ≫ Digital Experience Platform Version 7.4 Update update4

Liferay ≫ Digital Experience Platform Version 7.4 Update update5

Liferay ≫ Digital Experience Platform Version 7.4 Update update6

Liferay ≫ Digital Experience Platform Version 7.4 Update update7

Liferay ≫ Digital Experience Platform Version 7.4 Update update8

Liferay ≫ Digital Experience Platform Version 7.4 Update update9

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.404

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
security@liferay.com	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26268

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-26268

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-26268

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-26268

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-26268