7.5High
KEV
CVE-2021-22506Micro Focus Access Manager Information Leakage Vulnerability
Known exploited — Micro Focus Access Manager Information Leakage Vulnerability
CISA confirmed this vulnerability is used in real attacks on 03.11.2021. Remediation deadline for US federal agencies: 17.11.2021.
Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2021-22506
Description
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| microfocus | access manager | < 5.0 | |
| — | Access Manager. | All version prior version 5.0. |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:microfocus:access_manager:*:*:*:*:*:*:*:*< 5.0