Authentication Bypass Vulnerability in Micro Focus Enterprise Server Monitor and Control
CVE-2017-7420

9.8CRITICAL

Key Information:

Vendor

Micro Focus

Status
Micro Focus Enterprise Developer, Micro Focus Enterprise Server
Vendor
CVE Published:
21 August 2017

What is CVE-2017-7420?

A vulnerability exists in Micro Focus Enterprise Server Monitor and Control allowing remote unauthenticated attackers to bypass authentication. This flaw grants malicious users the ability to view and modify configuration settings as well as change the operational state of the affected products. Proper security measures should be implemented to mitigate these risks and ensure the confidentiality and integrity of systems.

Affected Version(s)

Micro Focus Enterprise Developer, Micro Focus Enterprise Server All versions before 2.3 Update 1, 2.3 Update 1 before Hotfix 8, 2.3 Update 2 before Hotfix 9

References

https://community.microfocus.com/microfocus/mainframe_sol...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.