CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25604

Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users with the VIEW user permission to edit their own permission via the User and Organizations section of the Control Panel.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.5%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2024-25604

Liferay » Digital Experience Platform » Version: N/A

cpe:2.3:a:liferay:digital_experience_platform:-
Liferay » Digital Experience Platform » Version: 6.2

cpe:2.3:a:liferay:digital_experience_platform:6.2
Liferay » Digital Experience Platform » Version: 7.0

cpe:2.3:a:liferay:digital_experience_platform:7.0
Liferay » Digital Experience Platform » Version: 7.1

cpe:2.3:a:liferay:digital_experience_platform:7.1
Liferay » Digital Experience Platform » Version: 7.2

cpe:2.3:a:liferay:digital_experience_platform:7.2
Liferay » Digital Experience Platform » Version: 7.3

cpe:2.3:a:liferay:digital_experience_platform:7.3
Liferay » Digital Experience Platform » Version: 7.4

cpe:2.3:a:liferay:digital_experience_platform:7.4
Liferay » Liferay Portal » Version: N/A

cpe:2.3:a:liferay:liferay_portal:-
Liferay » Liferay Portal » Version: 1.7.5

cpe:2.3:a:liferay:liferay_portal:1.7.5
Liferay » Liferay Portal » Version: 1.8.0

cpe:2.3:a:liferay:liferay_portal:1.8.0
Liferay » Liferay Portal » Version: 1.9.0

cpe:2.3:a:liferay:liferay_portal:1.9.0
Liferay » Liferay Portal » Version: 1.9.1

cpe:2.3:a:liferay:liferay_portal:1.9.1
Liferay » Liferay Portal » Version: 1.9.5

cpe:2.3:a:liferay:liferay_portal:1.9.5
Liferay » Liferay Portal » Version: 2.0.0

cpe:2.3:a:liferay:liferay_portal:2.0.0
Liferay » Liferay Portal » Version: 2.0.3

cpe:2.3:a:liferay:liferay_portal:2.0.3
Liferay » Liferay Portal » Version: 2.1.0

cpe:2.3:a:liferay:liferay_portal:2.1.0
Liferay » Liferay Portal » Version: 2.1.1

cpe:2.3:a:liferay:liferay_portal:2.1.1
Liferay » Liferay Portal » Version: 2.2.0

cpe:2.3:a:liferay:liferay_portal:2.2.0
Liferay » Liferay Portal » Version: 2.2.1

cpe:2.3:a:liferay:liferay_portal:2.2.1
Liferay » Liferay Portal » Version: 2.2.5

cpe:2.3:a:liferay:liferay_portal:2.2.5
Liferay » Liferay Portal » Version: 3.0.0

cpe:2.3:a:liferay:liferay_portal:3.0.0
Liferay » Liferay Portal » Version: 3.1.0

cpe:2.3:a:liferay:liferay_portal:3.1.0
Liferay » Liferay Portal » Version: 3.2.0

cpe:2.3:a:liferay:liferay_portal:3.2.0
Liferay » Liferay Portal » Version: 3.5.0

cpe:2.3:a:liferay:liferay_portal:3.5.0
Liferay » Liferay Portal » Version: 3.6.0

cpe:2.3:a:liferay:liferay_portal:3.6.0
Liferay » Liferay Portal » Version: 3.6.1

cpe:2.3:a:liferay:liferay_portal:3.6.1
Liferay » Liferay Portal » Version: 4.0.0

cpe:2.3:a:liferay:liferay_portal:4.0.0
Liferay » Liferay Portal » Version: 4.1.0

cpe:2.3:a:liferay:liferay_portal:4.1.0
Liferay » Liferay Portal » Version: 4.1.1

cpe:2.3:a:liferay:liferay_portal:4.1.1
Liferay » Liferay Portal » Version: 4.1.2

cpe:2.3:a:liferay:liferay_portal:4.1.2
Liferay » Liferay Portal » Version: 4.1.3

cpe:2.3:a:liferay:liferay_portal:4.1.3
Liferay » Liferay Portal » Version: 4.2.0

cpe:2.3:a:liferay:liferay_portal:4.2.0
Liferay » Liferay Portal » Version: 4.2.1

cpe:2.3:a:liferay:liferay_portal:4.2.1
Liferay » Liferay Portal » Version: 4.2.2

cpe:2.3:a:liferay:liferay_portal:4.2.2
Liferay » Liferay Portal » Version: 4.3.0

cpe:2.3:a:liferay:liferay_portal:4.3.0
Liferay » Liferay Portal » Version: 4.3.1

cpe:2.3:a:liferay:liferay_portal:4.3.1
Liferay » Liferay Portal » Version: 4.3.2

cpe:2.3:a:liferay:liferay_portal:4.3.2
Liferay » Liferay Portal » Version: 4.3.3

cpe:2.3:a:liferay:liferay_portal:4.3.3
Liferay » Liferay Portal » Version: 4.3.4

cpe:2.3:a:liferay:liferay_portal:4.3.4
Liferay » Liferay Portal » Version: 4.3.5

cpe:2.3:a:liferay:liferay_portal:4.3.5
Liferay » Liferay Portal » Version: 4.3.6

cpe:2.3:a:liferay:liferay_portal:4.3.6
Liferay » Liferay Portal » Version: 4.4.0

cpe:2.3:a:liferay:liferay_portal:4.4.0
Liferay » Liferay Portal » Version: 4.4.1

cpe:2.3:a:liferay:liferay_portal:4.4.1
Liferay » Liferay Portal » Version: 4.4.2

cpe:2.3:a:liferay:liferay_portal:4.4.2
Liferay » Liferay Portal » Version: 5.0.0

cpe:2.3:a:liferay:liferay_portal:5.0.0
Liferay » Liferay Portal » Version: 5.1.0

cpe:2.3:a:liferay:liferay_portal:5.1.0
Liferay » Liferay Portal » Version: 5.1.1

cpe:2.3:a:liferay:liferay_portal:5.1.1
Liferay » Liferay Portal » Version: 5.1.2

cpe:2.3:a:liferay:liferay_portal:5.1.2
Liferay » Liferay Portal » Version: 5.2

cpe:2.3:a:liferay:liferay_portal:5.2
Liferay » Liferay Portal » Version: 5.2.0

cpe:2.3:a:liferay:liferay_portal:5.2.0
Liferay » Liferay Portal » Version: 5.2.1

cpe:2.3:a:liferay:liferay_portal:5.2.1
Liferay » Liferay Portal » Version: 5.2.2

cpe:2.3:a:liferay:liferay_portal:5.2.2
Liferay » Liferay Portal » Version: 5.2.3

cpe:2.3:a:liferay:liferay_portal:5.2.3
Liferay » Liferay Portal » Version: 6.0

cpe:2.3:a:liferay:liferay_portal:6.0
Liferay » Liferay Portal » Version: 6.0.0

cpe:2.3:a:liferay:liferay_portal:6.0.0
Liferay » Liferay Portal » Version: 6.0.1

cpe:2.3:a:liferay:liferay_portal:6.0.1
Liferay » Liferay Portal » Version: 6.0.2

cpe:2.3:a:liferay:liferay_portal:6.0.2
Liferay » Liferay Portal » Version: 6.0.3

cpe:2.3:a:liferay:liferay_portal:6.0.3
Liferay » Liferay Portal » Version: 6.0.4

cpe:2.3:a:liferay:liferay_portal:6.0.4
Liferay » Liferay Portal » Version: 6.0.5

cpe:2.3:a:liferay:liferay_portal:6.0.5
Liferay » Liferay Portal » Version: 6.0.6

cpe:2.3:a:liferay:liferay_portal:6.0.6
Liferay » Liferay Portal » Version: 6.1

cpe:2.3:a:liferay:liferay_portal:6.1
Liferay » Liferay Portal » Version: 6.1.0

cpe:2.3:a:liferay:liferay_portal:6.1.0
Liferay » Liferay Portal » Version: 6.1.1

cpe:2.3:a:liferay:liferay_portal:6.1.1
Liferay » Liferay Portal » Version: 6.1.2

cpe:2.3:a:liferay:liferay_portal:6.1.2
Liferay » Liferay Portal » Version: 6.1.2_ce_ga3

cpe:2.3:a:liferay:liferay_portal:6.1.2_ce_ga3
Liferay » Liferay Portal » Version: 6.1.x_ee

cpe:2.3:a:liferay:liferay_portal:6.1.x_ee
Liferay » Liferay Portal » Version: 6.2

cpe:2.3:a:liferay:liferay_portal:6.2
Liferay » Liferay Portal » Version: 6.2.0

cpe:2.3:a:liferay:liferay_portal:6.2.0
Liferay » Liferay Portal » Version: 6.2.1

cpe:2.3:a:liferay:liferay_portal:6.2.1
Liferay » Liferay Portal » Version: 6.2.2

cpe:2.3:a:liferay:liferay_portal:6.2.2
Liferay » Liferay Portal » Version: 6.2.3

cpe:2.3:a:liferay:liferay_portal:6.2.3
Liferay » Liferay Portal » Version: 6.2.4

cpe:2.3:a:liferay:liferay_portal:6.2.4
Liferay » Liferay Portal » Version: 6.2.5

cpe:2.3:a:liferay:liferay_portal:6.2.5
Liferay » Liferay Portal » Version: 6.2.x_ee

cpe:2.3:a:liferay:liferay_portal:6.2.x_ee
Liferay » Liferay Portal » Version: 7.0

cpe:2.3:a:liferay:liferay_portal:7.0
Liferay » Liferay Portal » Version: 7.0.0

cpe:2.3:a:liferay:liferay_portal:7.0.0
Liferay » Liferay Portal » Version: 7.0.1

cpe:2.3:a:liferay:liferay_portal:7.0.1
Liferay » Liferay Portal » Version: 7.0.2

cpe:2.3:a:liferay:liferay_portal:7.0.2
Liferay » Liferay Portal » Version: 7.0.3

cpe:2.3:a:liferay:liferay_portal:7.0.3
Liferay » Liferay Portal » Version: 7.0.3_ga4

cpe:2.3:a:liferay:liferay_portal:7.0.3_ga4
Liferay » Liferay Portal » Version: 7.0.4

cpe:2.3:a:liferay:liferay_portal:7.0.4
Liferay » Liferay Portal » Version: 7.0.5

cpe:2.3:a:liferay:liferay_portal:7.0.5
Liferay » Liferay Portal » Version: 7.0.6

cpe:2.3:a:liferay:liferay_portal:7.0.6
Liferay » Liferay Portal » Version: 7.1

cpe:2.3:a:liferay:liferay_portal:7.1
Liferay » Liferay Portal » Version: 7.1.0

cpe:2.3:a:liferay:liferay_portal:7.1.0
Liferay » Liferay Portal » Version: 7.1.1

cpe:2.3:a:liferay:liferay_portal:7.1.1
Liferay » Liferay Portal » Version: 7.1.2

cpe:2.3:a:liferay:liferay_portal:7.1.2
Liferay » Liferay Portal » Version: 7.1.3

cpe:2.3:a:liferay:liferay_portal:7.1.3
Liferay » Liferay Portal » Version: 7.2

cpe:2.3:a:liferay:liferay_portal:7.2
Liferay » Liferay Portal » Version: 7.2.0

cpe:2.3:a:liferay:liferay_portal:7.2.0
Liferay » Liferay Portal » Version: 7.2.1

cpe:2.3:a:liferay:liferay_portal:7.2.1
Liferay » Liferay Portal » Version: 7.3

cpe:2.3:a:liferay:liferay_portal:7.3
Liferay » Liferay Portal » Version: 7.3.0

cpe:2.3:a:liferay:liferay_portal:7.3.0
Liferay » Liferay Portal » Version: 7.3.1

cpe:2.3:a:liferay:liferay_portal:7.3.1
Liferay » Liferay Portal » Version: 7.3.2

cpe:2.3:a:liferay:liferay_portal:7.3.2
Liferay » Liferay Portal » Version: 7.3.3

cpe:2.3:a:liferay:liferay_portal:7.3.3
Liferay » Liferay Portal » Version: 7.3.4

cpe:2.3:a:liferay:liferay_portal:7.3.4
Liferay » Liferay Portal » Version: 7.3.5

cpe:2.3:a:liferay:liferay_portal:7.3.5
Liferay » Liferay Portal » Version: 7.3.6

cpe:2.3:a:liferay:liferay_portal:7.3.6
Liferay » Liferay Portal » Version: 7.3.7

cpe:2.3:a:liferay:liferay_portal:7.3.7
Liferay » Liferay Portal » Version: 7.4.0

cpe:2.3:a:liferay:liferay_portal:7.4.0
Liferay » Liferay Portal » Version: 7.4.1

cpe:2.3:a:liferay:liferay_portal:7.4.1
Liferay » Liferay Portal » Version: 7.4.2

cpe:2.3:a:liferay:liferay_portal:7.4.2
Liferay » Liferay Portal » Version: 7.4.3.4

cpe:2.3:a:liferay:liferay_portal:7.4.3.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25604

Products

Pricing

Contact Us