Web Services Vulnerability in Micro Focus Service Manager
CVE-2020-9519

5.3MEDIUM

Key Information:

Vendor

Micro Focus International

Status
Service Manager (server).
Vendor
CVE Published:
16 March 2020

What is CVE-2020-9519?

A vulnerability exists within the web services of Micro Focus Service Manager, specifically affecting multiple versions from 9.40 to 9.63. This security flaw allows for the exposure of sensitive configuration data through improper handling of HTTP methods, potentially leading to unauthorized information disclosure. Organizations utilizing affected versions should implement necessary patches or mitigations to secure their systems.

Affected Version(s)

Service Manager (Server). 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63

References

https://softwaresupport.softwaregrp.com/doc/KM03607789
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.