6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Description
In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a userβs password reminder answer, which allows remote authenticated users to obtain a userβs password reminder answer via the audit events.
Basic Information
ID
CVE-2025-43814
Source
Liferay
Published
Sep 22, 2025 at 23:01
Affected Product
Vendor
Liferay
Product
Portal
Version
7.4.0
Affected Versions
Liferay Portal 7.4.0
Liferay DXP 7.4.13
Liferay DXP 2023.Q3.1
Liferay DXP 2023.Q4.0
Liferay DXP 7.4.13
Liferay DXP 2023.Q3.1
Liferay DXP 2023.Q4.0