CVE-2019-11989: HP Icewall SSO Agent

Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days.

A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7.

Affected products

• HP Icewall SSO Agent: version 10.0 only; version 11.0 only
• HP MFA Proxy: version 4.0 only

Published 2019-07-19. Last modified 2026-06-17.