HTTP Header Reflection Vulnerability in Micro Focus Solutions Business Manager
CVE-2018-7680

6.1MEDIUM

Key Information:

Vendor

Micro Focus

Status
Solutions Business Manager 11.4
Vendor
CVE Published:
21 June 2018

What is CVE-2018-7680?

The vulnerability in Micro Focus Solutions Business Manager allows for the reflection of HTTP header values back to the client. This can lead to potentially exposing sensitive information or enabling further attacks. It is crucial for users of versions prior to 11.4 to implement security measures to protect their environments.

Affected Version(s)

Solutions Business Manager 11.4 Solutions Business Manager versions prior to 11.4

References

http://help.serena.com/doc_center/sbm/ver11_4/sbm_release...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.