CVE-2020-9518 : Login filter can access configuration files vulnerability in Micro Focus Service

Login filter can access configuration files vulnerability in Micro Focus Service Manager (Web Tier), affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to configuration data.

Published 2020-03-16 14:15:15

Updated 2021-07-21 11:39:24

Source Micro Focus International (DEFUNCT)

View at NVD, CVE.org

Vulnerability category: Bypass

Products affected by CVE-2020-9518

Microfocus » Service Manager
Versions from including (>=) 9.50 and up to, including, (<=) 9.62
cpe:2.3:a:microfocus:service_manager:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-9518

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-9518

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

References for CVE-2020-9518

https://softwaresupport.softwaregrp.com/doc/KM03607792

MySupport - Micro Focus Software Support
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-9518

Products affected by CVE-2020-9518

Exploit prediction scoring system (EPSS) score for CVE-2020-9518

CVSS scores for CVE-2020-9518

References for CVE-2020-9518