Information Exposure in Micro Focus Service Manager Versions

CVE-2019-11662

What is CVE-2019-11662?

The Micro Focus Service Manager is vulnerable due to the inclusion of class and method names in its error messages across various versions. In specific circumstances, this flaw may lead to the unintended disclosure of sensitive information, which could be utilized by attackers to gain insights into the system's architecture and functionality. This vulnerability underlines the importance of secure error handling and the obfuscation of internal details to mitigate the risk of data exposure.

References