Vulnerability Description
A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Netiq Self Service Password Reset | >= 4.2.0.0, < 4.2.0.6 |
References
- https://www.netiq.com/documentation/self-service-password-reset-42/release-notes
- https://www.netiq.com/documentation/self-service-password-reset-43/release-notes
- https://www.netiq.com/documentation/self-service-password-reset-44/release-notes
- https://www.netiq.com/documentation/self-service-password-reset-42/release-notes
- https://www.netiq.com/documentation/self-service-password-reset-43/release-notes
- https://www.netiq.com/documentation/self-service-password-reset-44/release-notes
FAQ
What is CVE-2019-11652?
CVE-2019-11652 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset ...
How severe is CVE-2019-11652?
CVE-2019-11652 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-11652?
Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Netiq Self Service Password Reset.