CVE-2019-11662 - Vulnerability Details - OpenCVE

Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00199.

Key SSVC decision points have not yet been added.

Vendors	Products
Microfocus	Service Manager

Configuration 1 [-]

cpe:2.3:a:microfocus:service_manager:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2019-3332	Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://softwaresupport.softwaregrp.com/doc/KM03518316

History

No history.

MITRE

Status: PUBLISHED

Assigner: microfocus

Published: 2019-09-18T21:55:49

Updated: 2024-08-04T23:03:32.184Z

Reserved: 2019-05-01T00:00:00

Link: CVE-2019-11662

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-09-18T22:15:10.903

Modified: 2024-11-21T04:21:33.150

Link: CVE-2019-11662

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "Service Manager", "vendor": "Micro Focus", "versions": [{"status": "affected", "version": "9.30"}, {"status": "affected", "version": "9.31"}, {"status": "affected", "version": "9.32"}, {"status": "affected", "version": "9.33"}, {"status": "affected", "version": "9.34"}, {"status": "affected", "version": "9.35"}, {"status": "affected", "version": "9.40"}, {"status": "affected", "version": "9.41"}, {"status": "affected", "version": "9.50"}, {"status": "affected", "version": "9.51"}, {"status": "affected", "version": "9.52"}, {"status": "affected", "version": "9.60"}, {"status": "affected", "version": "9.61"}, {"status": "affected", "version": "9.62"}]}], "descriptions": [{"lang": "en", "value": "Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message."}], "problemTypes": [{"descriptions": [{"description": "Class and method names in error message.", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-06T16:15:40", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "ID": "CVE-2019-11662", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Service Manager", "version": {"version_data": [{"version_value": "9.30"}, {"version_value": "9.31"}, {"version_value": "9.32"}, {"version_value": "9.33"}, {"version_value": "9.34"}, {"version_value": "9.35"}, {"version_value": "9.40"}, {"version_value": "9.41"}, {"version_value": "9.50"}, {"version_value": "9.51"}, {"version_value": "9.52"}, {"version_value": "9.60"}, {"version_value": "9.61"}, {"version_value": "9.62"}]}}]}, "vendor_name": "Micro Focus"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Class and method names in error message."}]}]}, "references": {"reference_data": [{"name": "https://softwaresupport.softwaregrp.com/doc/KM03518316", "refsource": "CONFIRM", "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T23:03:32.184Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}]}]}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2019-11662", "datePublished": "2019-09-18T21:55:49", "dateReserved": "2019-05-01T00:00:00", "dateUpdated": "2024-08-04T23:03:32.184Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:service_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "2ADB19C2-B503-4BC5-A54D-D3F7E7B1E975", "versionEndIncluding": "9.62", "versionStartIncluding": "9.30", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Class and method names in error message in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited in some special cases to allow information exposure through an error message."}, {"lang": "es", "value": "Los nombres de clase y m\u00e9todo en un mensaje de error en Micro Focus Service Manager versiones de producto 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. Esta vulnerabilidad podr\u00eda ser explotada en algunos casos especiales para permitir la exposici\u00f3n de informaci\u00f3n por medio de un mensaje de error."}], "id": "CVE-2019-11662", "lastModified": "2024-11-21T04:21:33.150", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-18T22:15:10.903", "references": [{"source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://softwaresupport.softwaregrp.com/doc/KM03518316"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-209"}], "source": "nvd@nist.gov", "type": "Primary"}]}