Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1
CVE-2022-38755

5.3MEDIUM

Key Information:

Vendor

Micro Focus

Status
Micro Focus Filr
Vendor
CVE Published:
21 November 2022

What is CVE-2022-38755?

A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prior to 4.3.1.1.

Affected Version(s)

Micro Focus Filr < 4.3.1.1

References

https://portal.microfocus.com/s/article/KM000011886?langu...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Micro Focus would like to thank Christopher Haller and Matthew Sparrow from Centripetal for their work discovering and reporting this vulnerability.
.