CVE-2019-11652: Critical severity micro focus netiq self service password reset vulnerability
A potential authorization bypass issue was found in Micro Focus Self Service Password Reset (SSPR) versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset (SSPR) SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11652?
CVE-2019-11652 has a medium severity level due to the potential authorization bypass issue.
How do I fix CVE-2019-11652?
To fix CVE-2019-11652, upgrade to Micro Focus Self Service Password Reset (SSPR) versions 4.4.0.3, 4.3.0.6, or 4.2.0.6.
Which versions of Micro Focus Self Service Password Reset are affected by CVE-2019-11652?
CVE-2019-11652 affects versions of Micro Focus Self Service Password Reset prior to 4.4.0.3, 4.3.0.6, and 4.2.0.6.
What is the impact of CVE-2019-11652 on Micro Focus Self Service Password Reset?
CVE-2019-11652 may allow unauthorized users to access sensitive functionality, compromising user security.
Is there a workaround for CVE-2019-11652 if I cannot upgrade?
There are no documented workarounds for CVE-2019-11652; the recommended mitigation is to upgrade to a secure version.