title: Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1
description: A vulnerability has been identified in Micro Focus Filr in versions prior to 4.3.1.1. The vulnerability could be exploited to allow a remote unauthenticated attacker to enumerate valid users of the system. Remote unauthenticated user enumeration. This issue affects: Micro Focus Filr versions prior to 4.3.1.1.
problem types: Remote unauthenticated user enumeration
affected:
{
vendor: Micro Focus
product: Micro Focus Filr
versions:
version: unspecified, lessThan: 4.3.1.1, status: affected, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
]
solutions: Micro Focus has made the following mitigation information available to resolve the vulnerability for the impacted versions of Micro Focus Filr:
Please update to Micro Focus Filr 4.3.1.1 or newer