CVE-2020-9523

Name of the Vulnerable Software and Affected Versions Micro Focus Enterprise Developer and Enterprise Server versions prior to 4.0 Patch Update 16 Micro Focus Enterprise Developer and Enterprise Server version 5.0 Patch Update 6

Description The issue is related to insufficiently protected credentials, which could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.

Recommendations For versions prior to 4.0 Patch Update 16, update to 4.0 Patch Update 16 or later to resolve the issue. For version 5.0 Patch Update 6, update to a version later than 5.0 Patch Update 6 to resolve the issue.