CVE-2019-11989 — HP Icewall SSO Agent vulnerability

3 documents3 sources
Severity
5.9MEDIUMNVD
EPSS
0.6%
top 29.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
HP Icewall SSO AgentHP MFA Proxy
Timeline
PublishedJul 19
Latest updateMay 24

Description

A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶NVDhp/icewall_sso_agent10.0, 11.0+1
▶NVDhp/mfa_proxy4.0

🔴Vulnerability Details

2
GHSA
GHSA-f8hj-w8g6-hq97: A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service↗2022-05-24
▶
CVEList
CVE-2019-11989: A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service↗2019-07-19
▶
CVE-2019-11989 — HP Icewall SSO Agent vulnerability | cvebase