CVE:CVE-2016-5765
CNNVD:CNNVD-201611-648
Micro Focus Host Access Management and Security Server（MSS，前称Attachmate Host Access Management and Security Server）等都是英国Micro Focus公司的产品。MSS是一款提供访问管理和安全的服务器；Reflection for the Web（RWeb，全称Attachmate Reflection for the Web）是一套终端仿真软件。
Micro Focus Host Access MSS、RWeb和Reflection Security Gateway (RSG)中的Administrative Server存在信息泄露漏洞。远程攻击者可借助特制的URL利用该漏洞读取任意文件。以下版本受到影响：MSS 12.3.326之前的12.3版本，MSS 12.2.342之前的12.2版本；RSG 12.1.362之前的12.1版本；RWeb 12.3.312之前的12.3版本，RWeb 12.2.342之前的12.2版本，RWeb 12.1.362之前的12.1版本；ZFE 2.0.1.18之前的2.0.1版本，Reflection ZFE (ZFE)ZFE 2.0.0.52之前的2.0.0版本，ZFE 1.4.0.14之前的1.4.0版本。
solution:Upgrade microfocus host_access_management_and_security_server to a higher version than 12.2,12.3,and avoid the version 12.2,12.3; Upgrade microfocus reflection_for_the_web to a higher version than 12.1,12.2,12.3,and avoid the version 12.1,12.2,12.3; Upgrade microfocus reflection_security_gateway to a higher version than 12.1,and avoid the version 12.1; Upgrade microfocus reflection_zfe to a higher version than 1.4.0.14,2.0.0.52,2.0.1.18,and avoid the version 1.4.0.14,2.0.0.52,2.0.1.18