CVE-2020-11842

HIGH

Micro Focus Verastream Host Integrator < 7.8 Update 1 - Unauthenticated Information Disclosure

Title source: llm
STIX 2.1

Description

Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view.

References (1)

Core 1
Core References
Various Sources x_refsource_misc
https://support.microfocus.com/kb/doc.php?id=7024567

Scores

CVSS v3 7.5
EPSS 0.0069
EPSS Percentile 71.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (2)
microfocus/verastream_host_integrator 7.8
microfocus/verastream_host_integrator < 7.7
Published May 04, 2020
Tracked Since Feb 18, 2026