Vulnerability Details CVE-2021-22506
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.376
EPSS Ranking 97.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Proposed Action
Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
Ransomware Campaign
Unknown
References
Products affected by CVE-2021-22506
-
cpe:2.3:a:microfocus:access_manager:4.0
-
cpe:2.3:a:microfocus:access_manager:4.0.1
-
cpe:2.3:a:microfocus:access_manager:4.1
-
cpe:2.3:a:microfocus:access_manager:4.2
-
cpe:2.3:a:microfocus:access_manager:4.2.2
-
cpe:2.3:a:microfocus:access_manager:4.2.4
-
cpe:2.3:a:microfocus:access_manager:4.3
-
cpe:2.3:a:microfocus:access_manager:4.3.1
-
cpe:2.3:a:microfocus:access_manager:4.3.2
-
cpe:2.3:a:microfocus:access_manager:4.3.3
-
cpe:2.3:a:microfocus:access_manager:4.4
-
cpe:2.3:a:microfocus:access_manager:4.5