CVE-2019-11652

2019-08-1415:47:44

microfocus

www.cve.org

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.1%

JSON

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.

CNA Affected

[
  {
    "product": "Self Service Password Reset (SSPR)",
    "vendor": "Micro Focus",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 4.4.0.3"
      },
      {
        "status": "affected",
        "version": "prior to 4.3.0.6"
      },
      {
        "status": "affected",
        "version": "prior to 4.2.0.6"
      }
    ]
  }
]