Firetruck

CVE-2021-22506

KEV

Micro Focus Access Manager Information Leakage Vulnerability

View CVE record →
Vendor / Project
Micro Focus
Product
Micro Focus Access Manager
Date added
Nov 3, 2021
Due date
Nov 17, 2021
Known ransomware use
Unknown
CWEs
—

Description

Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.

Required action

Apply updates per vendor instructions.

Notes