PT-2021-9010 · Micro Focus · Micro Focus Solutions Business Manager

Published 2021-02-26 · Updated 2021-03-01 · CVE-2019-18943

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager versions prior to 11.7.1

Description The issue concerns XML External Entity Processing (XXE) on certain operations. This means that the software is susceptible to attacks where an external entity is referenced within an XML document, potentially allowing unauthorized access to data.

Recommendations For versions prior to 11.7.1, update to version 11.7.1 or later to resolve the issue. As a temporary workaround, consider restricting XML processing to trusted sources until a patch is applied.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2019-18943

Affected Products

Micro Focus Solutions Business Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-18943 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18943 · Vendor Advisory
• https://t.me/cibsecurity/24196 · Telegram Post
• http://knowledgebase.serena.com/resources/sites/KNOWLEDGEBASE/content/live/SOLUTIONS/142000/S142001/en_US/sbm_11.7.1_security_bulletin.htm · Note