HIGH🇵🇱 Wersja polska

CVE-2020-9523

CVSS 8.8v3.1pub. 2020-04-17upd. 2024-11-21

Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microfocus Enterprise Developer

    APP
    Microfocus
    4.05.0≤ 3.0

  • Microfocus Enterprise Server

    APP
    Microfocus
    4.05.0≤ 3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-4501CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia LDAP w OpenText COBOL Server i Enterprise Server

CVE-2017-7420CRITICAL9.8PL ✓same product

Authentication Bypass w Micro Focus Enterprise Server Monitor and Control

CVE-2023-32265HIGH7.1same product

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ES...

CVE-2018-12469HIGH7.5same product

Incorrect handling of an invalid value for an HTTP request parameter by Directory Server (aka Enterprise Serve...

CVE-2017-5187HIGH8.8same product

A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration...