CVE-2020-25837

Published: Nov 5, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.

Affected (2)

Products: Microfocus: Self Service Password Reset

Microfocus

1 product

Self Service Password Reset

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microfocus Self Service Password Reset	From 4.4.0.0 to 4.4.0.6
Microfocus Self Service Password Reset	From 4.5.0.1 to 4.5.0.2

References (2)

https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html

Source: security@opentext.com

https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.