Design/Logic Flaw

2019-10-2215:15:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack.

CPENameOperatorVersion
netiq_self_service_password_resetle4.3
netiq_self_service_password_reseteq4.4
netiq_self_service_password_reseteq4.4 update-1
netiq_self_service_password_reseteq4.4 update-3
netiq_self_service_password_reseteq4.4 update-2

Name	Operator	Version
netiq_self_service_password_reset	le	4.3
netiq_self_service_password_reset	eq	4.4
netiq_self_service_password_reset	eq	4.4 update-1
netiq_self_service_password_reset	eq	4.4 update-3
netiq_self_service_password_reset	eq	4.4 update-2