Servers and applications
CVE-2022-41414
An insecure default in the component auth.login.prompt.enabled of Liferay Portal v7.0.0 through v7.4.2 allows attackers to enumerate usernames, site names, and pages.
- Severity
- Medium 5.3
- Published
- 7 Oct 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Liferay Portal / DXPServers and applications · cpe:a:liferay:liferay_portal |
|