CVE-2019-11674

Name of the Vulnerable Software and Affected Versions Micro Focus Self Service Password Reset versions prior to 4.4.0.4

Description The issue concerns a man-in-the-middle vulnerability that exploits invalid certificate validation, potentially resulting in a man-in-the-middle attack.

Recommendations For versions prior to 4.4.0.4, update to version 4.4.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Self Service Password Reset feature until the update is applied.