CISA Known Exploited Vulnerability

CVE-2021-22506

Micro Focus · Micro Focus Access Manager

Micro Focus Access Manager Information Leakage Vulnerability

Date added
BOD 22-01 due date
CWE
Ransomware Unknown

CISA description

Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.

Required action

Apply updates per vendor instructions.