HIGH🇬🇧 English

CVE-2020-9523

CVSS 8.8v3.1pub. 2020-04-17upd. 2024-11-21

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microfocus Enterprise Developer

    APP
    Microfocus
    4.05.0≤ 3.0

  • Microfocus Enterprise Server

    APP
    Microfocus
    4.05.0≤ 3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-4501CRITICAL9.8PL ✓ten sam produkt

Pominięcie uwierzytelnienia LDAP w OpenText COBOL Server i Enterprise Server

CVE-2017-7420CRITICAL9.8PL ✓ten sam produkt

Authentication Bypass w Micro Focus Enterprise Server Monitor and Control

CVE-2023-32265HIGH7.1ten sam produkt

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ES...

CVE-2018-12469HIGH7.5ten sam produkt

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Serve...

CVE-2017-5187HIGH8.8ten sam produkt

A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration...