CVE-2017-7420

Critical

Published: 21/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An Authentication Bypass vulnerability in ESMAC (Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product.

Risk Assessment

This vulnerability may lead to unauthorized access to critical system settings, posing a serious threat to the integrity and availability of services.

Recommendation

It is recommended to update to version 2.3 Update 1 after Hotfix 8 or 2.3 Update 2 after Hotfix 9 to mitigate this vulnerability.

Original NVD description (English source)

An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter configuration information and alter the state of the running product (CWE-275).