Vulnerability in Micro Focus Service Manager
CVE-2019-11664
Clear text password in browser in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.
EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Micro Focus Service Manager — versions 9.30, 9.31, 9.32
- Microfocus Service_manager
Weakness classification (CWE)
References
- security@opentext.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-11664?
- CVE-2019-11664 is a medium-severity vulnerability in Micro Focus Service Manager, classified under Missing Encryption of Sensitive Data. CVSS score: 6.5/10. Published 2019-09-18.
- How severe is CVE-2019-11664?
- Medium severity. CVSS v3 base score is 6.5 out of 10.