NetSight
high7.5

CVE-2020-25837

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product.

Impact

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.

Affected products

VendorProductAffected versions
MicrofocusSelf Service Password Reset
from 4.4.0.0 through 4.4.0.6
from 4.5.0.1 through 4.5.0.2

References