Live › vulnerability › CVE-2021-22506
Go to dashboardMicro Focus Access Manager has an information leakage flaw in its SAML handling: a service provider redirection issue when the Assertion Consumer Service URL is used. An attacker can get data the product should keep private, such as session or assertion details, though the sources do not say exactly what leaks.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Micro Focus Micro Focus Access Manager | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the vendor update per Micro Focus instructions; the sources do not name a fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2021-22506")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.