Vulnerability · Published May 4, 2020 · Assigned by microfocus
CVE-2020-11842
High 7.5
In plain English
A high-severity security flaw in Verastream Host Integrator (VHI). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.1%top 33.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Verastream Host Integrator (VHI) | versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). |
References
- https://support.microfocus.com/kb/doc.php?id=7024567 x_refsource_MISC