CVE-2020-11849
Summary
| CVE | CVE-2020-11849 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-07-08 14:15:00 UTC |
| Updated | 2023-11-07 03:15:00 UTC |
| Description | Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unauthorized access. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microfocus | Identity Manager | All | All | All | All |
| Application | Microfocus | Identity Manager | 4.7.4 | All | All | All |
| Application | Microfocus | Identity Manager | 4.8.1 | All | All | All |
| Application | Microfocus | Identity Manager | All | All | All | All |
| Application | Microfocus | Identity Manager | 4.7.4 | All | All | All |
| Application | Microfocus | Identity Manager | 4.8.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| NetIQ Identity Manager Identity Applications 4.7 Service Pack 4 HotFix 1 Release Notes | MISC | www.netiq.com | Release Notes, Vendor Advisory |
| NetIQ Identity Manager Identity Applications 4.8 Service Pack 1 HotFix 1 Release Notes | www.netiq.com | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Mark van Reijn, of IDFocus.
There are currently no legacy QID mappings associated with this CVE.