CVE-2019-11989: High severity hpe icewall sso certified vulnerability
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11989?
CVE-2019-11989 is classified as a denial of service vulnerability.
How do I fix CVE-2019-11989?
To fix CVE-2019-11989, upgrade to a patched version of HPE IceWall SSO Agent, specifically version 11.0 or later.
What versions of HPE IceWall are affected by CVE-2019-11989?
CVE-2019-11989 affects version 10.0 of HPE IceWall SSO Agent for Apache.
Can CVE-2019-11989 be exploited remotely?
Yes, CVE-2019-11989 can be exploited remotely to cause a denial of service.
Which platforms are impacted by CVE-2019-11989?
The impacted platforms include RHEL 5 and 6 for Apache 2.2 and RHEL 7 for Apache 2.4.