HIGH

CVE-2021-22506

Microfocus Access Manager 2021-03-26 CVSS v3.1

CVSS

7.5

KEV

Description

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.

Summary dbcve.org

Information leakage vulnerability in Micro Focus Access Manager where advance configuration settings expose sensitive information to unauthorized users. Affects all versions prior to 5.0.

Mitigation

Upgrade to Micro Focus Access Manager version 5.0 or later to remediate the information leakage vulnerability.

EPSS Score

25.7%

Probability of exploitation in next 30 days

97.9th percentile

References

https://www.microfocus.com/documentation/access-manager/5.0/accessmanager50-release-notes/accessmanager50-release-notes.html Release Notes https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22506 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE