CyberSec.Space Logo
Back to CVE Browser

CVE-2020-15841

HIGH
8.3
CVSS Severity Score
EPSS Score0.0250%
EPSS Percentile44.75th
PublishedJul 20, 2020
Last ModifiedAug 15, 2025

Vulnerability Description

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature.

Affected Platforms (CPE)

📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Liferay Portal

< 7.3.0

References & Advisories

🔗 https://issues.liferay.com/browse/LPE-16928
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317439
🔗 https://issues.liferay.com/browse/LPE-16928
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317439

Related Vulnerabilities

CVE-2020-262467.7

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website s...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...