VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Oct 22, 2019· Updated Jun 17, 2026

CVE-2019-11674

CVE-2019-11674

Description

Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Micro Focus/Self Service Password Resetdescription
  • Microfocus/Self Service Password Resetllm-fuzzy
    Range: <4.4.0.4
  • Microfocus/Netiq Self Service Password Reset5 versions
    cpe:2.3:a:microfocus:netiq_self_service_password_reset:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microfocus:netiq_self_service_password_reset:*:*:*:*:*:*:*:*range: <=4.3
    • cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:-:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_1:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_2:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:netiq_self_service_password_reset:4.4:update_3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.