Vulnerabilities > CVE-2019-11652 - Unspecified vulnerability in Microfocus Netiq Self Service Password Reset

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
microfocus
critical
NVD
Published: 2019-08-14
Updated: 2023-11-07

Summary

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.

Vulnerable Configurations

Part Description Count
Application
Microfocus
1

References