CVE-2017-7420
Last modified
CVE-2017-7420 is a vulnerability of currently unknown severity. An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).. EPSS estimates a 2.44% chance of exploitation in the next 30 days.
Description
An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microfocus | Enterprise Developer | 2.3 | — |
| Microfocus | Enterprise Server | <= 2.3 | — |
| Microfocus | Enterprise Server | 2.3 | Update1 |
| Microfocus | Enterprise Server Monitor And Control | All versions | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-7420?
How severe is CVE-2017-7420?
How do I fix CVE-2017-7420?
Are you affected by CVE-2017-7420?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST