PT-2019-12450 · Micro Focus · Netiq

Publicado 2019-06-24 · Atualizado 2019-07-09 · CVE-2019-11647

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Micro Focus NetIQ Software versions prior to 4.4

Description A potential XSS issue exists in the Self Service Password Reset component. This could be exploited to enable an XSS attack.

Recommendations For versions prior to 4.4, update to version 4.4 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-11647

Produtos afetados

Netiq

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-11647 · Nota de Segurança
• https://netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p2/data/release-notes-sspr-44-p2.html · Nota
• https://osv.dev/vulnerability/CVE-2019-11647 · Aviso do Fabricante