CVE-2019-11653

Опубликовано: 07 авг. 2019

Источник: nvd

CVSS3: 5.4

CVSS2: 5.5

EPSS Низкий

Описание

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix1:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix2:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix3:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix4:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix5:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.2.0:patch3_hotfix1:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.3.0:patch2_hotfix1:*:*:*:*:*:*

cpe:2.3:a:microfocus:content_manager:9.3.0:patch2_hotfix2:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00125

Низкий

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-jwgr-xjjw-8rx8

github

больше 3 лет назад

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user?s CheckIn request.