Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12468

Опубликовано: 01 авг. 2018
Источник: nvd
CVSS3: 9.1
CVSS3: 7.2
CVSS2: 6.5
EPSS Низкий

Описание

A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:microfocus:groupwise:*:*:*:*:*:*:*:*
Версия до 18.0.2 (исключая)

EPSS

Процентиль: 78%
0.01132
Низкий

9.1 Critical

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
github
больше 3 лет назад

A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.

EPSS

Процентиль: 78%
0.01132
Низкий

9.1 Critical

CVSS3

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434