CVE-2021-29041

Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to…

published May 16, 2021

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of the other user or (2) modifying the other user's TOTP shared secret.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01124 · 66.0th percentile
Published
2021-05-16T15:14Z
EPSS history
Timeline
  • 16 MAY 15:14Z
    Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to…
    cvelistv5