CVE-2021-22506: Micro Focus Access Manager Information Leakage Vulnerability
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
Other sources
Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Micro Focus NetIQ Access Managerto a version that resolves this vulnerability.Fixed in 5.0
Event History
Frequently Asked Questions
What is CVE-2021-22506?
CVE-2021-22506 is an information leakage vulnerability in Micro Focus Access Manager product.
Which versions of Micro Focus Access Manager are affected by CVE-2021-22506?
All versions prior to version 5.0 of Micro Focus Access Manager are affected by CVE-2021-22506.
How severe is CVE-2021-22506?
CVE-2021-22506 has a severity rating of 7.5, which is considered high.
What is the impact of CVE-2021-22506?
CVE-2021-22506 could cause information leakage.
How can I fix CVE-2021-22506?
To fix CVE-2021-22506, update Micro Focus Access Manager to version 5.0 or later.