CVE-2019-11658

Published: Aug 30, 2019Modified: Jun 17, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Information exposure in Micro Focus Content Manager, versions 9.1, 9.2 and 9.3. This vulnerability when configured to use an Oracle database, allows valid system users to gain access to a limited subset of records they would not normally be able to access when the system is in an undisclosed abnormal state.

Affected (3)

Products: Microfocus: Content Manager

1 product

Content Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microfocus Content Manager	Version 9.1
Microfocus Content Manager	Version 9.2
Microfocus Content Manager	Version 9.3

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://softwaresupport.softwaregrp.com/doc/KM03496282

Source: security@opentext.com

https://softwaresupport.softwaregrp.com/doc/KM03496282

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.