Improper authorization control for web services In com.liferay.portal:release.dxp.bom
Description
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of the other user or (2) modifying the other user's TOTP shared secret.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 7.3.10.fp1 |
Aliases
1. 2. 3. 4.
References
1. 2.