7.5
CVE-2021-22506
- EPSS 37.55%
- Veröffentlicht 26.03.2021 14:15:11
- Zuletzt bearbeitet 12.03.2025 20:57:33
- Quelle security@opentext.com
- Teams Watchlist Login
- Unerledigt Login
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microfocus ≫ Access Manager Version < 5.0
03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog
Micro Focus Access Manager Information Leakage Vulnerability
SchwachstelleMicro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
BeschreibungApply updates per vendor instructions.
Erforderliche Maßnahmen| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 37.55% | 0.968 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|