Information Exposure in Micro Focus Content Manager by Micro Focus
CVE-2019-11658

4.3MEDIUM

Key Information:

Vendor

Micro Focus

Status
Content Manager
Vendor
CVE Published:
30 August 2019

What is CVE-2019-11658?

This vulnerability in Micro Focus Content Manager versions 9.1, 9.2, and 9.3 exposes sensitive information under specific conditions when integrated with an Oracle database. Valid system users may inadvertently gain access to limited records outside their normal permissions due to the system's abnormal state.

Affected Version(s)

Content Manager 9.1

Content Manager 9.2

Content Manager 9.3

References

https://softwaresupport.softwaregrp.com/doc/KM03496282
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.