CVE-2025-43768: Liferay Portal JSONWS API endpoint shares sensitive information

The analysis of the provided commit efdbdbce73605ecd13b1a5e60f5186cc59f09c16 clearly indicates that the vulnerability is located in the getRoleUserIds method of the UserServiceImpl class. The vulnerability description states that authenticated users without sufficient permissions can access sensitive information of admin users via JSONWS APIs. The patch directly addresses this by changing the permission check from a lenient ActionKeys.VIEW to a much stricter ActionKeys.ASSIGN_MEMBERS. This change confirms that the getRoleUserIds method was the entry point for the vulnerability. An attacker could have exploited this by making a JSONWS call to this method with the role ID of an administrator role, and if they had basic view permissions, they would receive a list of user IDs belonging to that administrator role. This constitutes a sensitive information disclosure. The identified function is the exact location of the vulnerable code that was fixed.