Vulnerability Description
Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Enterprise Developer | <= 3.0 |
| Microfocus | Enterprise Server | <= 3.0 |
Related Weaknesses (CWE)
References
- https://softwaresupport.softwaregrp.com/doc/KM03634936
- https://softwaresupport.softwaregrp.com/doc/KM03634936
FAQ
What is CVE-2020-9523?
CVE-2020-9523 is a vulnerability with a CVSS score of 8.8 (HIGH). Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vu...
How severe is CVE-2020-9523?
CVE-2020-9523 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9523?
Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Enterprise Developer, Microfocus Enterprise Server.