CVE-2020-9523
First published: Fri Apr 17 2020(Updated: )
Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The vulnerability could allow an attacker to transmit hashed credentials for the user account running the Micro Focus Directory Server (MFDS) to an arbitrary site, compromising that account's security.
Credit: security@microfocus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Micro Focus Enterprise Developer | <=3.0 | |
| Micro Focus Enterprise Developer | =4.0 | |
| Micro Focus Enterprise Developer | =4.0-update_1 | |
| Micro Focus Enterprise Developer | =4.0-update_10 | |
| Micro Focus Enterprise Developer | =4.0-update_11 | |
| Micro Focus Enterprise Developer | =4.0-update_12 | |
| Micro Focus Enterprise Developer | =4.0-update_13 | |
| Micro Focus Enterprise Developer | =4.0-update_14 | |
| Micro Focus Enterprise Developer | =4.0-update_15 | |
| Micro Focus Enterprise Developer | =4.0-update_2 | |
| Micro Focus Enterprise Developer | =4.0-update_3 | |
| Micro Focus Enterprise Developer | =4.0-update_4 | |
| Micro Focus Enterprise Developer | =4.0-update_5 | |
| Micro Focus Enterprise Developer | =4.0-update_6 | |
| Micro Focus Enterprise Developer | =4.0-update_7 | |
| Micro Focus Enterprise Developer | =4.0-update_8 | |
| Micro Focus Enterprise Developer | =4.0-update_9 | |
| Micro Focus Enterprise Developer | =5.0 | |
| Micro Focus Enterprise Developer | =5.0-update_1 | |
| Micro Focus Enterprise Developer | =5.0-update_2 | |
| Micro Focus Enterprise Developer | =5.0-update_3 | |
| Micro Focus Enterprise Developer | =5.0-update_4 | |
| Micro Focus Enterprise Developer | =5.0-update_5 | |
| Micro Focus Enterprise Server | <=3.0 | |
| Micro Focus Enterprise Server | =4.0 | |
| Micro Focus Enterprise Server | =4.0-update_1 | |
| Micro Focus Enterprise Server | =4.0-update_10 | |
| Micro Focus Enterprise Server | =4.0-update_11 | |
| Micro Focus Enterprise Server | =4.0-update_12 | |
| Micro Focus Enterprise Server | =4.0-update_13 | |
| Micro Focus Enterprise Server | =4.0-update_14 | |
| Micro Focus Enterprise Server | =4.0-update_15 | |
| Micro Focus Enterprise Server | =4.0-update_2 | |
| Micro Focus Enterprise Server | =4.0-update_3 | |
| Micro Focus Enterprise Server | =4.0-update_4 | |
| Micro Focus Enterprise Server | =4.0-update_5 | |
| Micro Focus Enterprise Server | =4.0-update_6 | |
| Micro Focus Enterprise Server | =4.0-update_7 | |
| Micro Focus Enterprise Server | =4.0-update_8 | |
| Micro Focus Enterprise Server | =4.0-update_9 | |
| Micro Focus Enterprise Server | =5.0 | |
| Micro Focus Enterprise Server | =5.0-update_1 | |
| Micro Focus Enterprise Server | =5.0-update_2 | |
| Micro Focus Enterprise Server | =5.0-update_3 | |
| Micro Focus Enterprise Server | =5.0-update_4 | |
| Micro Focus Enterprise Server | =5.0-update_5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9523?
CVE-2020-9523 is an insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server.
How does CVE-2020-9523 affect Micro Focus enterprise developer?
CVE-2020-9523 affects all versions prior to 4.0 Patch Update 16 of Micro Focus enterprise developer.
How does CVE-2020-9523 affect Micro Focus enterprise server?
CVE-2020-9523 affects all versions prior to 4.0 Patch Update 16 of Micro Focus enterprise server.
What is the severity of CVE-2020-9523?
The severity of CVE-2020-9523 is high, with a CVSS score of 8.8.
How can I mitigate CVE-2020-9523 on Micro Focus enterprise developer and server?
To mitigate CVE-2020-9523, it is recommended to update to version 4.0 Patch Update 16 or version 5.0 Patch Update 6 of Micro Focus enterprise developer and server.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microfocus
- canonical/micro focus enterprise developer
- version/micro focus enterprise developer/3.0
- version/micro focus enterprise developer/4.0
- version/micro focus enterprise developer/4.0-update_1
- version/micro focus enterprise developer/4.0-update_10
- version/micro focus enterprise developer/4.0-update_11
- version/micro focus enterprise developer/4.0-update_12
- version/micro focus enterprise developer/4.0-update_13
- version/micro focus enterprise developer/4.0-update_14
- version/micro focus enterprise developer/4.0-update_15
- version/micro focus enterprise developer/4.0-update_2
- version/micro focus enterprise developer/4.0-update_3
- version/micro focus enterprise developer/4.0-update_4
- version/micro focus enterprise developer/4.0-update_5
- version/micro focus enterprise developer/4.0-update_6
- version/micro focus enterprise developer/4.0-update_7
- version/micro focus enterprise developer/4.0-update_8
- version/micro focus enterprise developer/4.0-update_9
- version/micro focus enterprise developer/5.0
- version/micro focus enterprise developer/5.0-update_1
- version/micro focus enterprise developer/5.0-update_2
- version/micro focus enterprise developer/5.0-update_3
- version/micro focus enterprise developer/5.0-update_4
- version/micro focus enterprise developer/5.0-update_5
- canonical/micro focus enterprise server
- version/micro focus enterprise server/3.0
- version/micro focus enterprise server/4.0
- version/micro focus enterprise server/4.0-update_1
- version/micro focus enterprise server/4.0-update_10
- version/micro focus enterprise server/4.0-update_11
- version/micro focus enterprise server/4.0-update_12
- version/micro focus enterprise server/4.0-update_13
- version/micro focus enterprise server/4.0-update_14
- version/micro focus enterprise server/4.0-update_15
- version/micro focus enterprise server/4.0-update_2
- version/micro focus enterprise server/4.0-update_3
- version/micro focus enterprise server/4.0-update_4
- version/micro focus enterprise server/4.0-update_5
- version/micro focus enterprise server/4.0-update_6
- version/micro focus enterprise server/4.0-update_7
- version/micro focus enterprise server/4.0-update_8
- version/micro focus enterprise server/4.0-update_9
- version/micro focus enterprise server/5.0
- version/micro focus enterprise server/5.0-update_1
- version/micro focus enterprise server/5.0-update_2
- version/micro focus enterprise server/5.0-update_3
- version/micro focus enterprise server/5.0-update_4
- version/micro focus enterprise server/5.0-update_5