CVE-2020-25838 Information disclosure in Filr
Attackers can exploit this vulnerability in Micro Focus Filr to disclose unauthorized sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-25838?
CVE-2020-25838 is a medium-severity vulnerability in Filr, published on 11 Dec 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive information.
Which versions are affected by CVE-2020-25838?
It affects 1 product.
Products include Microfocus Filr.
How do I fix CVE-2020-25838?
No fix has been published for CVE-2020-25838 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-25838 being exploited?
There is no known exploitation of CVE-2020-25838 in the wild and no public exploit code.
Other vulnerabilities in Filr
- CVE-2019-3475 Local privilege escalation in Filr famtd
- CVE-2023-32268 Administrator equivalent Filr user can access proxy administrator credentials
- CVE-2019-3474 Path traversal vulnerability in Filr web application
- CVE-2020-25832 Cross-site scripting in Filr
- CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1
Sources
Also known as GHSA-r295-fpcq-rg99.