CVE-2023-4501 (cobol_server, enterprise_developer, enterprise_server, enterprise_test_server, visual_cobol)

User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and 9.0 patch update 1, when LDAP-based authentication is used with certain configurations. When the vulnerability is active, authentication succeeds with any valid username, regardless of whether the password is correct; it may also succeed with an …

authentication cobol credentials cve developer enterprise focus ldap micro micro focus opentext password patch product server test update updates username