← Database

CVE-2022-41414

MEDIUM CVSS: 5.3 Published: 2022-10-07 Modified: 2026-06-17

Description

An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages.

Affected Platforms

Liferay Liferay Portal

Weakness Type

CWE-276

References