VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Jul 19, 2019· Updated Jun 17, 2026

CVE-2019-11989

CVE-2019-11989

Description

A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7.

Affected products

5
  • Microfocus/IceWall SSO Agent Option2 versions
    cpe:2.3:a:hp:icewall_sso_agent:10.0:*:*:*:*:apache:*:*+ 1 more
    • cpe:2.3:a:hp:icewall_sso_agent:10.0:*:*:*:*:apache:*:*
    • cpe:2.3:a:hp:icewall_sso_agent:11.0:*:*:*:*:apache:*:*
  • Microfocus/MFA Proxy
    cpe:2.3:a:hp:mfa_proxy:4.0:*:*:*:*:apache:*:*
  • HPE/IceWall SSO Agent Optionllm-create
    Range: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows
  • HPE/IceWall MFAllm-fuzzy
    Range: MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.