CVE-2001-0208: Micro Focus Cobol

Medium severity, CVSS 4.6. EPSS: 0.7% chance of exploitation in the next 30 days.

MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.

Affected products

• Micro Focus Cobol: version 4.1 only

Published 2001-06-02. Last modified 2026-06-16.