CVE-2017-7420: Critical severity micro focus enterprise developer vulnerability
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7420?
CVE-2017-7420 is considered a high severity vulnerability due to its ability to allow unauthenticated remote access.
How do I fix CVE-2017-7420?
To resolve CVE-2017-7420, apply the appropriate hotfixes for Micro Focus Enterprise Developer and Enterprise Server as outlined in vendor documentation.
Which versions of Micro Focus software are affected by CVE-2017-7420?
CVE-2017-7420 affects Micro Focus Enterprise Developer and Enterprise Server versions 2.3 and earlier, including specific updates before hotfixes.
What impact does CVE-2017-7420 have on users?
CVE-2017-7420 allows remote unauthenticated attackers to view and alter configuration settings, potentially leading to further exploitation.
Is CVE-2017-7420 easy to exploit?
Yes, CVE-2017-7420 can be easily exploited by attackers who do not require authentication to access the vulnerable system.