CVE-2020-11450
High
Description
Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and other information through the URL /MicroStrategyWS/happyaxis.jsp. An attacker could use this vulnerability to learn more about the environment the application is running in. This issue has been mitigated in all versions of the product 11.0 and higher.
SeverityHigh
CVSS7.5
Exploit probability—
ProductMicrostrategy Web
PublishedApr 2, 2020
First seenApr 2, 2020
How to fix
Update
- microstrategy microstrategy_web11.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microstrategy microstrategy_web | v < 11.0 | 11.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.