CVE-2020-25837

2020-11-0520:21:03

microfocus

www.cve.org

micro focus

self service password reset

vulnerability

sensitive information disclosure .

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

53.8%

JSON

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.

CNA Affected

[
  {
    "product": "Micro Focus Self Service Password Reset (SSPR)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "4.4.0.0  to 4.4.0.6 and 4.5.0.1 and 4.5.0.2"
      }
    ]
  }
]