Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2022-42132

The Test LDAP Users functionality in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.0 fix pack 102 and earlier, 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before update 4, and DXP 7.4 GA includes the LDAP credential in the page URL when paginating through the list of users, which allows man-in-the-middle attackers or attackers with access to the request logs to see the LDAP credential.

  • Published: Nov 15, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-42132
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.9
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
liferay / digital_experience_platform 7.2 7.2.x
liferay / digital_experience_platform 7.2-fix_pack_1 7.2-fix_pack_1.x
liferay / digital_experience_platform 7.2-fix_pack_2 7.2-fix_pack_2.x
liferay / digital_experience_platform 7.2-fix_pack_3 7.2-fix_pack_3.x
liferay / digital_experience_platform 7.2-fix_pack_5 7.2-fix_pack_5.x
liferay / digital_experience_platform 7.2-fix_pack_4 7.2-fix_pack_4.x
liferay / digital_experience_platform 7.1-fix_pack_6 7.1-fix_pack_6.x
liferay / digital_experience_platform 7.1-fix_pack_9 7.1-fix_pack_9.x
liferay / digital_experience_platform 7.1-fix_pack_10 7.1-fix_pack_10.x
liferay / digital_experience_platform 7.1-fix_pack_11 7.1-fix_pack_11.x
liferay / digital_experience_platform 7.1-fix_pack_12 7.1-fix_pack_12.x
liferay / digital_experience_platform 7.1-fix_pack_13 7.1-fix_pack_13.x
liferay / digital_experience_platform 7.1-fix_pack_14 7.1-fix_pack_14.x
liferay / digital_experience_platform 7.1-fix_pack_15 7.1-fix_pack_15.x
liferay / digital_experience_platform 7.1-fix_pack_16 7.1-fix_pack_16.x
liferay / digital_experience_platform 7.1-fix_pack_17 7.1-fix_pack_17.x
liferay / digital_experience_platform 7.1-fix_pack_4 7.1-fix_pack_4.x
liferay / digital_experience_platform 7.1 7.1.x
liferay / digital_experience_platform 7.1-fix_pack_1 7.1-fix_pack_1.x
liferay / digital_experience_platform 7.1-fix_pack_2 7.1-fix_pack_2.x
liferay / digital_experience_platform 7.1-fix_pack_3 7.1-fix_pack_3.x
liferay / digital_experience_platform 7.1-fix_pack_5 7.1-fix_pack_5.x
liferay / digital_experience_platform 7.1-sp1 7.1-sp1.x
liferay / digital_experience_platform 7.1-fix_pack_7 7.1-fix_pack_7.x
liferay / digital_experience_platform 7.1-fix_pack_8 7.1-fix_pack_8.x
liferay / digital_experience_platform 7.1-fix_pack_19 7.1-fix_pack_19.x
liferay / digital_experience_platform 7.1-fix_pack_18 7.1-fix_pack_18.x
liferay / digital_experience_platform 7.2-fix_pack_6 7.2-fix_pack_6.x
liferay / digital_experience_platform 7.2-fix_pack_7 7.2-fix_pack_7.x
liferay / digital_experience_platform 7.2-fix_pack_8 7.2-fix_pack_8.x
liferay / digital_experience_platform 7.2-fix_pack_9 7.2-fix_pack_9.x
liferay / digital_experience_platform 7.0 7.0.x
liferay / digital_experience_platform 7.0-fix_pack_1 7.0-fix_pack_1.x
liferay / digital_experience_platform 7.0-fix_pack_2 7.0-fix_pack_2.x
liferay / digital_experience_platform 7.0-fix_pack_3 7.0-fix_pack_3.x
liferay / digital_experience_platform 7.0-fix_pack_4 7.0-fix_pack_4.x
liferay / digital_experience_platform 7.0-fix_pack_5 7.0-fix_pack_5.x
liferay / digital_experience_platform 7.0-fix_pack_6 7.0-fix_pack_6.x
liferay / digital_experience_platform 7.0-fix_pack_7 7.0-fix_pack_7.x
liferay / digital_experience_platform 7.0-fix_pack_8 7.0-fix_pack_8.x
liferay / digital_experience_platform 7.0-fix_pack_9 7.0-fix_pack_9.x
liferay / digital_experience_platform 7.0-fix_pack_10 7.0-fix_pack_10.x
liferay / digital_experience_platform 7.0-fix_pack_11 7.0-fix_pack_11.x
liferay / digital_experience_platform 7.0-fix_pack_12 7.0-fix_pack_12.x
liferay / digital_experience_platform 7.0-fix_pack_13 7.0-fix_pack_13.x
liferay / digital_experience_platform 7.0-fix_pack_14 7.0-fix_pack_14.x
liferay / digital_experience_platform 7.0-fix_pack_15 7.0-fix_pack_15.x
liferay / digital_experience_platform 7.0-fix_pack_16 7.0-fix_pack_16.x
liferay / digital_experience_platform 7.0-fix_pack_17 7.0-fix_pack_17.x
liferay / digital_experience_platform 7.0-fix_pack_18 7.0-fix_pack_18.x
liferay / digital_experience_platform 7.0-fix_pack_19 7.0-fix_pack_19.x
liferay / digital_experience_platform 7.0-fix_pack_20 7.0-fix_pack_20.x
liferay / digital_experience_platform 7.0-fix_pack_21 7.0-fix_pack_21.x
liferay / digital_experience_platform 7.0-fix_pack_22 7.0-fix_pack_22.x
liferay / digital_experience_platform 7.0-fix_pack_23 7.0-fix_pack_23.x
liferay / digital_experience_platform 7.0-fix_pack_24 7.0-fix_pack_24.x
liferay / digital_experience_platform 7.0-fix_pack_25 7.0-fix_pack_25.x
liferay / digital_experience_platform 7.0-fix_pack_26 7.0-fix_pack_26.x
liferay / digital_experience_platform 7.0-fix_pack_27 7.0-fix_pack_27.x
liferay / digital_experience_platform 7.0-fix_pack_28 7.0-fix_pack_28.x
liferay / digital_experience_platform 7.0-fix_pack_29 7.0-fix_pack_29.x
liferay / digital_experience_platform 7.0-fix_pack_30 7.0-fix_pack_30.x
liferay / digital_experience_platform 7.0-fix_pack_31 7.0-fix_pack_31.x
liferay / digital_experience_platform 7.0-fix_pack_32 7.0-fix_pack_32.x
liferay / digital_experience_platform 7.0-fix_pack_33 7.0-fix_pack_33.x
liferay / digital_experience_platform 7.0-fix_pack_34 7.0-fix_pack_34.x
liferay / digital_experience_platform 7.0-fix_pack_35 7.0-fix_pack_35.x
liferay / digital_experience_platform 7.0-fix_pack_36 7.0-fix_pack_36.x
liferay / digital_experience_platform 7.0-fix_pack_37 7.0-fix_pack_37.x
liferay / digital_experience_platform 7.0-fix_pack_38 7.0-fix_pack_38.x
liferay / digital_experience_platform 7.0-fix_pack_39 7.0-fix_pack_39.x
liferay / digital_experience_platform 7.0-fix_pack_40 7.0-fix_pack_40.x
liferay / digital_experience_platform 7.0-fix_pack_41 7.0-fix_pack_41.x
liferay / digital_experience_platform 7.0-fix_pack_42 7.0-fix_pack_42.x
liferay / digital_experience_platform 7.0-fix_pack_43 7.0-fix_pack_43.x
liferay / digital_experience_platform 7.0-fix_pack_44 7.0-fix_pack_44.x
liferay / digital_experience_platform 7.0-fix_pack_45 7.0-fix_pack_45.x
liferay / digital_experience_platform 7.0-fix_pack_46 7.0-fix_pack_46.x
liferay / digital_experience_platform 7.0-fix_pack_47 7.0-fix_pack_47.x
liferay / digital_experience_platform 7.0-fix_pack_48 7.0-fix_pack_48.x
liferay / digital_experience_platform 7.0-fix_pack_49 7.0-fix_pack_49.x
liferay / digital_experience_platform 7.0-fix_pack_50 7.0-fix_pack_50.x
liferay / digital_experience_platform 7.0-fix_pack_51 7.0-fix_pack_51.x
liferay / digital_experience_platform 7.0-fix_pack_52 7.0-fix_pack_52.x
liferay / digital_experience_platform 7.0-fix_pack_53 7.0-fix_pack_53.x
liferay / digital_experience_platform 7.0-fix_pack_54 7.0-fix_pack_54.x
liferay / digital_experience_platform 7.0-fix_pack_55 7.0-fix_pack_55.x
liferay / digital_experience_platform 7.0-fix_pack_56 7.0-fix_pack_56.x
liferay / digital_experience_platform 7.0-fix_pack_57 7.0-fix_pack_57.x
liferay / digital_experience_platform 7.0-fix_pack_58 7.0-fix_pack_58.x
liferay / digital_experience_platform 7.0-fix_pack_59 7.0-fix_pack_59.x
liferay / digital_experience_platform 7.0-fix_pack_60 7.0-fix_pack_60.x
liferay / digital_experience_platform 7.0-fix_pack_61 7.0-fix_pack_61.x
liferay / digital_experience_platform 7.0-fix_pack_62 7.0-fix_pack_62.x
liferay / digital_experience_platform 7.0-fix_pack_63 7.0-fix_pack_63.x
liferay / digital_experience_platform 7.0-fix_pack_64 7.0-fix_pack_64.x
liferay / digital_experience_platform 7.0-fix_pack_65 7.0-fix_pack_65.x
liferay / digital_experience_platform 7.0-fix_pack_66 7.0-fix_pack_66.x
liferay / digital_experience_platform 7.0-fix_pack_67 7.0-fix_pack_67.x
liferay / digital_experience_platform 7.0-fix_pack_68 7.0-fix_pack_68.x
liferay / digital_experience_platform 7.0-fix_pack_69 7.0-fix_pack_69.x
liferay / digital_experience_platform 7.0-fix_pack_70 7.0-fix_pack_70.x
liferay / digital_experience_platform 7.0-fix_pack_71 7.0-fix_pack_71.x
liferay / digital_experience_platform 7.0-fix_pack_72 7.0-fix_pack_72.x
liferay / digital_experience_platform 7.0-fix_pack_73 7.0-fix_pack_73.x
liferay / digital_experience_platform 7.0-fix_pack_74 7.0-fix_pack_74.x
liferay / digital_experience_platform 7.0-fix_pack_75 7.0-fix_pack_75.x
liferay / digital_experience_platform 7.0-fix_pack_76 7.0-fix_pack_76.x
liferay / digital_experience_platform 7.0-fix_pack_77 7.0-fix_pack_77.x
liferay / digital_experience_platform 7.0-fix_pack_78 7.0-fix_pack_78.x
liferay / digital_experience_platform 7.0-fix_pack_79 7.0-fix_pack_79.x
liferay / digital_experience_platform 7.0-fix_pack_80 7.0-fix_pack_80.x
liferay / digital_experience_platform 7.0-fix_pack_81 7.0-fix_pack_81.x
liferay / digital_experience_platform 7.0-fix_pack_82 7.0-fix_pack_82.x
liferay / digital_experience_platform 7.0-fix_pack_83 7.0-fix_pack_83.x
liferay / digital_experience_platform 7.0-fix_pack_84 7.0-fix_pack_84.x
liferay / digital_experience_platform 7.0-fix_pack_85 7.0-fix_pack_85.x
liferay / digital_experience_platform 7.0-fix_pack_86 7.0-fix_pack_86.x
liferay / digital_experience_platform 7.0-fix_pack_87 7.0-fix_pack_87.x
liferay / digital_experience_platform 7.0-fix_pack_88 7.0-fix_pack_88.x
liferay / digital_experience_platform 7.0-fix_pack_89 7.0-fix_pack_89.x
liferay / digital_experience_platform 7.0-fix_pack_90 7.0-fix_pack_90.x
liferay / digital_experience_platform 7.0-fix_pack_91 7.0-fix_pack_91.x
liferay / digital_experience_platform 7.0-fix_pack_92 7.0-fix_pack_92.x
liferay / digital_experience_platform 7.0-fix_pack_93 7.0-fix_pack_93.x
liferay / digital_experience_platform 7.0-fix_pack_94 7.0-fix_pack_94.x
liferay / digital_experience_platform 7.0-fix_pack_95 7.0-fix_pack_95.x
liferay / digital_experience_platform 7.0-fix_pack_96 7.0-fix_pack_96.x
liferay / digital_experience_platform 7.0-fix_pack_97 7.0-fix_pack_97.x
liferay / digital_experience_platform 7.0-fix_pack_98 7.0-fix_pack_98.x
liferay / digital_experience_platform 7.0-fix_pack_99 7.0-fix_pack_99.x
liferay / digital_experience_platform 7.0-fix_pack_100 7.0-fix_pack_100.x
liferay / digital_experience_platform 7.3-fix_pack_1 7.3-fix_pack_1.x
liferay / digital_experience_platform 7.3 7.3.x
liferay / digital_experience_platform 7.2-fix_pack_11 7.2-fix_pack_11.x
liferay / digital_experience_platform 7.2-fix_pack_12 7.2-fix_pack_12.x
liferay / digital_experience_platform 7.2-fix_pack_13 7.2-fix_pack_13.x
liferay / digital_experience_platform 7.2-fix_pack_14 7.2-fix_pack_14.x
liferay / digital_experience_platform 7.2-fix_pack_15 7.2-fix_pack_15.x
liferay / digital_experience_platform 7.2-fix_pack_16 7.2-fix_pack_16.x
liferay / digital_experience_platform 7.1-fix_pack_20 7.1-fix_pack_20.x
liferay / digital_experience_platform 7.1-fix_pack_21 7.1-fix_pack_21.x
liferay / digital_experience_platform 7.1-fix_pack_22 7.1-fix_pack_22.x
liferay / digital_experience_platform 7.1-fix_pack_23 7.1-fix_pack_23.x
liferay / digital_experience_platform 7.2-fix_pack_10 7.2-fix_pack_10.x
liferay / digital_experience_platform 7.3-fix_pack_2 7.3-fix_pack_2.x
liferay / digital_experience_platform 7.4 7.4.x
liferay / digital_experience_platform 7.1-fix_pack_24 7.1-fix_pack_24.x
liferay / digital_experience_platform 7.1-fix_pack_25 7.1-fix_pack_25.x
liferay / digital_experience_platform 7.1-fix_pack_26 7.1-fix_pack_26.x
liferay / liferay_portal 7.0.0 7.4.3.5