CST-7126 Password info recorded in logs

Description

In Liferay Portal 7.1 CE GA3 and older unsupported versions, user password hashes and password reminder answers may be appear in the logs if a database error occurs.

Severity

Severity 2

Fixed Version(s)

Publication date: Tue, 25 Jun 2019 22:29:00 +0000

Security advisories for Liferay's enterprise offerings (e.g., Liferay DXP) are only listed here since 2023. Historial advisories are availabe in the Help Center.