CVE-2022-41414

An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and…

published October 7, 2022

CVSS
—
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Published
2022-10-07T00:00Z
EPSS history
Timeline
  • 07 OCT 00:00Z
    An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and…
    cvelistv5