CVE-2021-29043
MediumCVSS 5.9Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
The Portal Store module in Liferay Portal 7.0.0 through 7.3.5 and Liferay DXP 7.0 through 7.3 does not obfuscate the S3 store's proxy password, allowing attackers to steal the proxy password via man-in-the-middle attacks or shoulder surfing.
Risk Assessment
The risk is that an attacker can intercept the S3 proxy password, potentially leading to unauthorized access to cloud-stored data and further attacks on the infrastructure.
Recommendation
It is recommended to immediately upgrade Liferay Portal to version 7.3.6 or later, and for Liferay DXP apply the appropriate fix pack (97 for 7.0, 21 for 7.1, 10 for 7.2, 1 for 7.3).
Original NVD description (English source)
The Portal Store module in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 does not obfuscate the S3 store's proxy password, which allows attackers to steal the proxy password via man-in-the-middle attacks or shoulder surfing.