PT-2019-12465
CVE-2019-11663
·
Published
2019-09-18
·
Updated
2021-07-21
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Micro Focus Service Manager versions 9.30 through 9.62
Description
The issue concerns the use of clear text credentials to access the managers app in Tomcat, potentially allowing sensitive data exposure.
Recommendations
For versions 9.30 through 9.62, update the configuration to use encrypted credentials instead of clear text credentials to access the managers app in Tomcat.
Found an issue in the description? Have something to add? Feel free to write us 👾