CVE-2024-26268
20.02.2024, 14:15
User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.Enginsight
| Vendor | Product | Version |
|---|---|---|
| liferay | liferay_portal | 𝑥 ≤ 7.3.7 |
| liferay | liferay_portal | 7.4.0 ≤ 𝑥 < 7.4.3.27 |
| liferay | digital_experience_platform | 𝑥 < 7.2 |
| liferay | digital_experience_platform | 7.2 |
| liferay | digital_experience_platform | 7.2:fix_pack_1 |
| liferay | digital_experience_platform | 7.2:fix_pack_10 |
| liferay | digital_experience_platform | 7.2:fix_pack_11 |
| liferay | digital_experience_platform | 7.2:fix_pack_12 |
| liferay | digital_experience_platform | 7.2:fix_pack_13 |
| liferay | digital_experience_platform | 7.2:fix_pack_14 |
| liferay | digital_experience_platform | 7.2:fix_pack_15 |
| liferay | digital_experience_platform | 7.2:fix_pack_16 |
| liferay | digital_experience_platform | 7.2:fix_pack_17 |
| liferay | digital_experience_platform | 7.2:fix_pack_18 |
| liferay | digital_experience_platform | 7.2:fix_pack_19 |
| liferay | digital_experience_platform | 7.2:fix_pack_2 |
| liferay | digital_experience_platform | 7.2:fix_pack_3 |
| liferay | digital_experience_platform | 7.2:fix_pack_4 |
| liferay | digital_experience_platform | 7.2:fix_pack_5 |
| liferay | digital_experience_platform | 7.2:fix_pack_6 |
| liferay | digital_experience_platform | 7.2:fix_pack_7 |
| liferay | digital_experience_platform | 7.2:fix_pack_8 |
| liferay | digital_experience_platform | 7.2:fix_pack_9 |
| liferay | digital_experience_platform | 7.2:service_pack_1 |
| liferay | digital_experience_platform | 7.2:service_pack_2 |
| liferay | digital_experience_platform | 7.2:service_pack_3 |
| liferay | digital_experience_platform | 7.2:service_pack_4 |
| liferay | digital_experience_platform | 7.2:service_pack_5 |
| liferay | digital_experience_platform | 7.2:service_pack_6 |
| liferay | digital_experience_platform | 7.2:service_pack_7 |
| liferay | digital_experience_platform | 7.3 |
| liferay | digital_experience_platform | 7.3:fix_pack_1 |
| liferay | digital_experience_platform | 7.3:fix_pack_2 |
| liferay | digital_experience_platform | 7.3:service_pack_1 |
| liferay | digital_experience_platform | 7.3:service_pack_3 |
| liferay | digital_experience_platform | 7.3:update4 |
| liferay | digital_experience_platform | 7.3:update5 |
| liferay | digital_experience_platform | 7.3:update6 |
| liferay | digital_experience_platform | 7.3:update7 |
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4:update1 |
| liferay | digital_experience_platform | 7.4:update10 |
| liferay | digital_experience_platform | 7.4:update11 |
| liferay | digital_experience_platform | 7.4:update12 |
| liferay | digital_experience_platform | 7.4:update13 |
| liferay | digital_experience_platform | 7.4:update14 |
| liferay | digital_experience_platform | 7.4:update15 |
| liferay | digital_experience_platform | 7.4:update16 |
| liferay | digital_experience_platform | 7.4:update17 |
| liferay | digital_experience_platform | 7.4:update18 |
| liferay | digital_experience_platform | 7.4:update19 |
| liferay | digital_experience_platform | 7.4:update2 |
| liferay | digital_experience_platform | 7.4:update20 |
| liferay | digital_experience_platform | 7.4:update21 |
| liferay | digital_experience_platform | 7.4:update22 |
| liferay | digital_experience_platform | 7.4:update23 |
| liferay | digital_experience_platform | 7.4:update24 |
| liferay | digital_experience_platform | 7.4:update25 |
| liferay | digital_experience_platform | 7.4:update26 |
| liferay | digital_experience_platform | 7.4:update3 |
| liferay | digital_experience_platform | 7.4:update4 |
| liferay | digital_experience_platform | 7.4:update5 |
| liferay | digital_experience_platform | 7.4:update6 |
| liferay | digital_experience_platform | 7.4:update7 |
| liferay | digital_experience_platform | 7.4:update8 |
| liferay | digital_experience_platform | 7.4:update9 |
𝑥
= Vulnerable software versions