Information disclosure in Micro Focus Netiq Self Service Password Reset.
CVE-2019-11648
An information leakage exists in Micro Focus NetIQ Self Service Password Reset Software all versions prior to version 4.4. The vulnerability could be exploited to expose sensitive information.
Vulnerability class: Information Disclosure
EPSS: 0.011 (62.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Micro Focus Netiq Self Service Password Reset. — versions All versions prior to version 4.4
- Netiq Self_service_password_reset
Weakness classification (CWE)
References
- security@opentext.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-11648?
- CVE-2019-11648 is a high-severity vulnerability in Micro Focus Netiq Self Service Password Reset., classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-06-24.
- How severe is CVE-2019-11648?
- High severity. CVSS v3 base score is 7.5 out of 10.