{"id":"CVE-2021-22506","kind":"vulnerability","aliases":["CVE-2021-22506"],"related":[],"title":"Micro Focus Micro Focus Access Manager: Micro Focus Access Manager Information Leakage Vulnerability","description":"Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Micro Focus Access Manager has an information leakage flaw in its SAML handling: a service provider redirection issue when the Assertion Consumer Service URL is used. An attacker can get data the product should keep private, such as session or assertion details, though the sources do not say exactly what leaks.","severity":"high","cvss":7.5,"epss":0.25695,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"Micro Focus Micro Focus Access Manager","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["access-manager","exploited","micro-focus","saml","vendor"],"not_affected_if":["no-saml-configuration"],"how_to_check":null,"fix":"Apply the vendor update per Micro Focus instructions; the sources do not name a fixed version.","status":"open","published_at":"2021-03-26T14:15:11+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T21:37:26+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-23T21:37:26Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor update per Micro Focus instructions; the sources do not name a fixed version.","reach":"internet","impact":"medium","summary":"Micro Focus Access Manager has an information leakage flaw in its SAML handling: a service provider redirection issue when the Assertion Consumer Service URL is used. An attacker can get data the product should keep private, such as session or assertion details, though the sources do not say exactly what leaks.","category":"vendor","who_cares":["micro-focus","access-manager","saml"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown data leaks through SAML redirect handling; exact contents unstated","analyst_note":"Find the Micro Focus advisory for CVE-2021-22506 to get affected and fixed versions, and confirm what data leaks and what config triggers it.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-saml-configuration"],"user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000469,"input_tokens":2853,"output_tokens":367,"severity_before":"unknown"},"analyst_status":"queued","analyst_note":"Find the Micro Focus advisory for CVE-2021-22506 to get affected and fixed versions, and confirm what data leaks and what config triggers it.","search":"'-2021':15A,18A '-22506':16A,19A 'access':5A,9A,24A,27B,37B,88C 'access-manag':26B 'action':113C 'appli':114C 'assert':55B,75B,105C 'attack':62B 'cisa':111C 'consum':56B,106C 'contain':90C 'cve':14A,17A 'data':65B 'detail':76B 'exact':83B 'exploit':29B 'flaw':43B 'focus':2A,4A,8A,21A,23A,32B,36B,87C 'get':64B 'handl':47B 'inform':11A,41B,92C 'instruct':118C 'issu':52B,102C 'keep':69B 'leak':85B 'leakag':12A,42B,93C 'manag':6A,10A,28B,38B,89C 'manager':25A 'micro':1A,3A,7A,20A,22A,31B,35B,86C 'micro-focus':30B 'per':116C 'privat':70B 'product':67B 'provid':50B,100C 'redirect':51B,101C 'requir':112C 'result':95C 'saml':33B,46B,98C 'say':82B 'servic':49B,57B,99C,107C 'session':73B 'sourc':79B 'though':77B 'updat':115C 'url':58B,108C 'use':60B,110C 'vendor':34B,117C 'vulner':13A,94C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-03-26T14:15:11+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-22506","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-22506","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T10:39:08+00:00","note":null},{"source":"epss","external_id":"CVE-2021-22506","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-22506","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-22506","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22506","severity":null,"published_at":"2021-03-26T14:15:11+00:00","modified_at":"2026-06-17T03:37:20+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}