Vulnerabilites related to microfocus - ucmdb_configuration_manager
Vulnerability from fkie_nvd
Published
2018-04-24 01:29
Modified
2024-11-21 04:10
Severity ?
8.1 (High) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
microfocus | ucmdb_configuration_manager | 10.20 | |
microfocus | ucmdb_configuration_manager | 10.21 | |
microfocus | ucmdb_configuration_manager | 10.22 | |
microfocus | ucmdb_configuration_manager | 10.30 | |
microfocus | ucmdb_configuration_manager | 10.31 | |
microfocus | ucmdb_configuration_manager | 10.32 | |
microfocus | ucmdb_configuration_manager | 10.33 | |
microfocus | ucmdb_configuration_manager | 11.00 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.20:*:*:*:*:*:*:*", "matchCriteriaId": "F02FF23A-C3C1-40A0-86D2-2D3670F8023A", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.21:*:*:*:*:*:*:*", "matchCriteriaId": "780A0E82-769A-4683-AB07-2CF032A0CE9E", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*", "matchCriteriaId": "03B6B711-E61B-4956-AFBD-6C05AC853116", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.30:*:*:*:*:*:*:*", "matchCriteriaId": "21D99F23-AF13-47EF-8689-25BCBC97FBF2", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.31:*:*:*:*:*:*:*", "matchCriteriaId": "28BFA973-F26F-49FB-B0A6-24D76A5453CA", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.32:*:*:*:*:*:*:*", "matchCriteriaId": "604BCBEE-604A-422C-8CEE-5DA7F311A0F0", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:10.33:*:*:*:*:*:*:*", "matchCriteriaId": "8030C319-AA7C-4862-8C2D-940E58DF6C3C", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:11.00:*:*:*:*:*:*:*", "matchCriteriaId": "94D4364A-8737-49EB-B2A1-676F70BB4826", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege." }, { "lang": "es", "value": "Vulnerabilidad de escalado local de privilegios en Micro Focus Universal CMDB 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33 y 11.00. La vulnerabilidad se podr\u00eda explotar de forma remota para permitir un escalado local de privilegios." } ], "id": "CVE-2018-6491", "lastModified": "2024-11-21T04:10:45.980", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "security@opentext.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2018-04-24T01:29:00.397", "references": [ { "source": "security@opentext.com", "url": "http://www.securitytracker.com/id/1040680" }, { "source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1040680" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180" } ], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2018-02-22 22:29
Modified
2024-11-21 04:10
Severity ?
8.1 (High) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
microfocus | ucmdb_configuration_manager | 4.10 | |
microfocus | ucmdb_configuration_manager | 4.11 | |
microfocus | ucmdb_configuration_manager | 4.12 |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:4.10:*:*:*:*:*:*:*", "matchCriteriaId": "5E8A64AA-32D3-452D-A542-523B6ADED9BF", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:4.11:*:*:*:*:*:*:*", "matchCriteriaId": "39A63423-AF90-48EE-AE9D-5852F38E9AF0", "vulnerable": true }, { "criteria": "cpe:2.3:a:microfocus:ucmdb_configuration_manager:4.12:*:*:*:*:*:*:*", "matchCriteriaId": "EB77A231-AE2A-4266-A345-1D248F72E33C", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution." }, { "lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n de c\u00f3digo arbitrario en Micro Focus Universal CMDB 4.10, 4.11 y 4.12. Esta vulnerabilidad podr\u00eda explotarse de forma remota para permitir la ejecuci\u00f3n de c\u00f3digo arbitrario." } ], "id": "CVE-2018-6488", "lastModified": "2024-11-21T04:10:45.653", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "security@opentext.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2018-02-22T22:29:00.270", "references": [ { "source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019" } ], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-94" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
CVE-2018-6491 (GCVE-0-2018-6491)
Vulnerability from cvelistv5
Published
2018-04-23 21:00
Modified
2024-08-05 06:01
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Local Escalation of Privilege
Summary
Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege.
References
► | URL | Tags | ||||||
---|---|---|---|---|---|---|---|---|
|
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Micro Focus | Universal CMDB |
Version: 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T06:01:49.261Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "1040680", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1040680" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Universal CMDB", "vendor": "Micro Focus", "versions": [ { "status": "affected", "version": "10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00" } ] } ], "credits": [ { "lang": "en", "value": "Micro Focus would like to thank TrendyTofu of Trend Micro\u0027s Zero Day Initiative for reporting this issue to cyber-psrt@microfocus.com." } ], "datePublic": "2018-04-16T00:00:00", "descriptions": [ { "lang": "en", "value": "Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege." } ], "exploits": [ { "lang": "en", "value": "Local Escalation of Privilege" } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "description": "Local Escalation of Privilege", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-01-06T16:16:08", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus" }, "references": [ { "name": "1040680", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1040680" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180" } ], "source": { "discovery": "UNKNOWN" }, "title": "MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability", "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@microfocus.com", "ID": "CVE-2018-6491", "STATE": "PUBLIC", "TITLE": "MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Universal CMDB", "version": { "version_data": [ { "version_value": "10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00" } ] } } ] }, "vendor_name": "Micro Focus" } ] } }, "credit": [ { "lang": "eng", "value": "Micro Focus would like to thank TrendyTofu of Trend Micro\u0027s Zero Day Initiative for reporting this issue to cyber-psrt@microfocus.com." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege." } ] }, "exploit": [ { "lang": "en", "value": "Local Escalation of Privilege" } ], "impact": { "cvss": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Local Escalation of Privilege" } ] } ] }, "references": { "reference_data": [ { "name": "1040680", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1040680" }, { "name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180", "refsource": "CONFIRM", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180" } ] }, "source": { "discovery": "UNKNOWN" } } } }, "cveMetadata": { "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2018-6491", "datePublished": "2018-04-23T21:00:00", "dateReserved": "2018-02-01T00:00:00", "dateUpdated": "2024-08-05T06:01:49.261Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
CVE-2018-6488 (GCVE-0-2018-6488)
Vulnerability from cvelistv5
Published
2018-02-22 22:00
Modified
2024-09-17 04:20
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Arbitrary Code Execution
Summary
Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution.
References
► | URL | Tags |
---|---|---|
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
Micro Focus | Micro Focus Universal CMDB |
Version: 4.10, 4.11, 4.12 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T06:01:49.274Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Micro Focus Universal CMDB", "vendor": "Micro Focus", "versions": [ { "status": "affected", "version": "4.10, 4.11, 4.12" } ] } ], "credits": [ { "lang": "en", "value": "Micro Focus would like to thank Chethan K and Sharp Rodney for reporting this issue to cyber-psrt@microfocus.com" } ], "datePublic": "2018-02-21T00:00:00", "descriptions": [ { "lang": "en", "value": "Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution." } ], "exploits": [ { "lang": "en", "value": "Arbitrary Code Execution" } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "description": "Arbitrary Code Execution", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2021-01-06T16:15:24", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019" } ], "source": { "discovery": "UNKNOWN" }, "title": "MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance", "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@microfocus.com", "DATE_PUBLIC": "2018-02-21T22:00:00.000Z", "ID": "CVE-2018-6488", "STATE": "PUBLIC", "TITLE": "MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Micro Focus Universal CMDB", "version": { "version_data": [ { "version_value": "4.10, 4.11, 4.12" } ] } } ] }, "vendor_name": "Micro Focus" } ] } }, "credit": [ { "lang": "eng", "value": "Micro Focus would like to thank Chethan K and Sharp Rodney for reporting this issue to cyber-psrt@microfocus.com" } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution." } ] }, "exploit": [ { "lang": "en", "value": "Arbitrary Code Execution" } ], "impact": { "cvss": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Arbitrary Code Execution" } ] } ] }, "references": { "reference_data": [ { "name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019", "refsource": "CONFIRM", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03086019" } ] }, "source": { "discovery": "UNKNOWN" } } } }, "cveMetadata": { "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2018-6488", "datePublished": "2018-02-22T22:00:00Z", "dateReserved": "2018-02-01T00:00:00", "dateUpdated": "2024-09-17T04:20:29.356Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }