Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to
    execute arbitrary code via JSON web services (JSONWS). (CVE-2020-7961)

The version of Liferay Portal installed on the remote host is affected by a remote code execution vulnerability in its JSON web services component. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A remote code execution vulnerability exists in Liferay Portal prior to 7.2.1 CE GA2 due to Deserialization of Untrusted Data. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands.

Liferay Portal is a common Java Content Management System (CMS) used for building corporate intranets and public websites.

Liferay Portal versions 6.2.4 and below, 7.0.0 to 7.0.5, 7.1.0 to 7.1.2 and 7.2.0 perform unsafe Java deserialization through the JSON webservices, allowing unauthenticated attackers to do remote code execution on the target application.

ID	Name	Product	Family	Severity
419789	SCA: security update for com.liferay.portal:com.liferay.portal.kernel (GHSA-w7pm-cc4v-f3g8)	Tenable Cloud Security	SCA Checks	critical
419789	SCA: security update for com.liferay.portal:com.liferay.portal.kernel (GHSA-w7pm-cc4v-f3g8)	Tenable Self-Hosted Container Security	SCA Checks	critical
155678	Liferay Portal 6.2.x < 6.2.5 / 7.0.x < 7.0.6 / 7.1.x < 7.1.3 / 7.2.x < 7.2.1 RCE	Nessus	CGI abuses	critical
146861	Liferay Portal Remote Code Execution (direct check)	Nessus	Web Servers	critical
112382	Liferay Portal < 6.2.5 / 7.0.x < 7.0.6 / 7.1.x < 7.1.3 / 7.2.0 Remote Code Execution	Web App Scanning	Component Vulnerability	critical

Detections

Analytics

CVE-2020-7961

critical

Tenable Plugins

critical

critical

critical

critical

critical