Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.

CVE-2023-32265

What is CVE-2023-32265?

A security vulnerability exists within the Enterprise Server Common Web Administration (ESCWA) component utilized in various Micro Focus products. Exploitation requires authenticated access to ESCWA, giving an attacker the potential to compromise sensitive information, specifically a service account password. Although the affected account typically possesses limited privileges, it can still be leveraged to extract details from other user accounts. To mitigate this vulnerability, it is advised to restrict network access to ESCWA and carefully manage user permissions within the Micro Focus Directory Server.

References