{"id":"CVE-2020-25837","state":"PUBLISHED","title":"Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.","description":"Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information.","publishedAt":"2020-11-05T20:21:03.000Z","updatedAt":"2024-08-04T15:40:36.943Z","severity":null,"assigner":"microfocus","products":["n/a Micro Focus Self Service Password Reset (SSPR)"],"affected":[{"vendor":"n/a","product":"Micro Focus Self Service Password Reset (SSPR)","versions":[{"version":"4.4.0.0  to 4.4.0.6 and 4.5.0.1 and 4.5.0.2","status":"affected"}]}],"references":["https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:05.429Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/25xxx/CVE-2020-25837.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-25837","state":"PUBLISHED","datePublished":"2020-11-05T20:21:03.000Z","dateUpdated":"2024-08-04T15:40:36.943Z","assignerShortName":"microfocus","assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateReserved":"2020-09-23T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information."}],"affected":[{"vendor":"n/a","product":"Micro Focus Self Service Password Reset (SSPR)","versions":[{"version":"4.4.0.0  to 4.4.0.6 and 4.5.0.1 and 4.5.0.2","status":"affected"}]}],"references":[{"url":"https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"information leakage","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"microfocus","dateUpdated":"2021-01-06T16:15:55.000Z","orgId":"f81092c5-7f14-476d-80dc-24857f90be84"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@microfocus.com","ID":"CVE-2020-25837","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Micro Focus Self Service Password Reset (SSPR)","version":{"version_data":[{"version_value":"4.4.0.0  to 4.4.0.6 and 4.5.0.1 and 4.5.0.2"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"information leakage"}]}]},"references":{"reference_data":[{"name":"https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html","refsource":"MISC","url":"https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.netiq.com/documentation/self-service-password-reset-44/release-notes-sspr-44-p7/data/release-notes-sspr-44-p7.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T15:40:36.943Z"}}]}}}