What is CVE-2023-4501?

CVE-2023-4501 is a critical-severity vulnerability in Opentext Visual Cobol, Cobol Server, Enterprise Developer, Server, classified under Improper Authentication. CVSS score: 9.8/10. Published 2023-09-12.

How severe is CVE-2023-4501?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Opentext Visual Cobol, Cobol Server, Enterprise Developer, Server

CVE-2023-4501

User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versio…

Vulnerability class: Broken Authentication

EPSS: 0.002 (38.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Opentext Visual Cobol, Cobol Server, Enterprise Developer, Server — versions 7.0.19, 8.0.8, 9.0.1

Weakness classification (CWE)

References

portal.microfocus.com/s/article/KM000021287

Frequently asked questions

What is CVE-2023-4501?: CVE-2023-4501 is a critical-severity vulnerability in Opentext Visual Cobol, Cobol Server, Enterprise Developer, Server, classified under Improper Authentication. CVSS score: 9.8/10. Published 2023-09-12.
How severe is CVE-2023-4501?: Critical severity. CVSS v3 base score is 9.8 out of 10.