What is CVE-2020-11849?

CVE-2020-11849 is a critical-severity vulnerability in Microfocus Identity Manager. CVSS score: 9.8/10. Published 2020-07-08.

How severe is CVE-2020-11849?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Microfocus Identity Manager

CVE-2020-11849

Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unauthorized access.

EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microfocus Identity_manager — versions 4.7.4, 4.8.1
Micro Fosus Identity Manager — versions unspecified

References

security@opentext.com (x_refsource_MISC)
security@opentext.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-11849?: CVE-2020-11849 is a critical-severity vulnerability in Microfocus Identity Manager. CVSS score: 9.8/10. Published 2020-07-08.
How severe is CVE-2020-11849?: Critical severity. CVSS v3 base score is 9.8 out of 10.