7.5
CVE-2021-22506
- EPSS 37.55%
- Published 26.03.2021 14:15:11
- Last modified 12.03.2025 20:57:33
- Source security@opentext.com
- Teams watchlist Login
- Open Login
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
Data is provided by the National Vulnerability Database (NVD)
Microfocus ≫ Access Manager Version < 5.0
03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog
Micro Focus Access Manager Information Leakage Vulnerability
VulnerabilityMicro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
DescriptionApply updates per vendor instructions.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 37.55% | 0.968 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|