CVE-2019-11663: Medium severity hp service manager vulnerability
Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11663?
CVE-2019-11663 is classified as a medium severity vulnerability due to its potential for sensitive data exposure.
How do I fix CVE-2019-11663?
To fix CVE-2019-11663, ensure that credentials are not transmitted in clear text by implementing secure configurations and updating to the latest version of Micro Focus Service Manager.
What versions of Micro Focus Service Manager are affected by CVE-2019-11663?
CVE-2019-11663 affects Micro Focus Service Manager versions 9.30 through 9.62.
What are the potential consequences of CVE-2019-11663?
The potential consequences of CVE-2019-11663 include unauthorized access to sensitive data due to the use of clear text credentials.
Is there a workaround for CVE-2019-11663?
A potential workaround for CVE-2019-11663 includes enhancing network security controls and encrypting sensitive data transmissions.