PT-2020-16235
CVE-2020-25837
·
Published
2020-11-05
·
Updated
2021-07-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Micro Focus Self Service Password Reset (SSPR) versions 4.4.0.0 through 4.4.0.6
Micro Focus Self Service Password Reset (SSPR) versions 4.5.0.1 through 4.5.0.2
Description
The issue is a sensitive information disclosure vulnerability. It could disclose sensitive information in certain configurations.
Recommendations
For versions 4.4.0.0 through 4.4.0.6, update to a version outside of this range to resolve the issue.
For versions 4.5.0.1 through 4.5.0.2, update to a version outside of this range to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾