GitHub Advisoryadvisory · Maven

GHSA-cx84-43xc-3gm2 Improper Certificate Validation in Liferay Portal

MEDIUM Published 2022-11-15 Modified 2022-11-21 Official page ↗
Aliases
CVE-2022-42131
Ecosystem
Maven
Packages
com.liferay.portal:release.portal.bom
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-295
Reviewed
2022-11-21

Affected packages

• Maven com.liferay.portal:release.portal.bom: >= 7.1.0, < 7.4.3.4 → fixed in 7.4.3.4

Description

Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.

Related

Alias · CVE (1)

  • CVE-2022-42131 Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. vulnerability

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References