CoreCVE
Back

MEDIUM

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62

Published Sep 18, 2019

Description

Clear text credentials are used to access managers app in Tomcat in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-311

Missing Encryption of Sensitive Data

CWE-522

Insufficiently Protected Credentials

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microfocus
Published Sep 18, 2019
Updated Aug 4, 2024
Reserved May 1, 2019
Link CVE-2019-11663
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-11663
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-11663
ENISA EUVD
Assigner microfocus
Published Sep 18, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-3333
EUVD-2019-3333