CVE-2018-18591

Published: Nov 13, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data.

Affected (10)

Products: Microfocus: Service Manager

Microfocus

1 product

Service Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microfocus Service Manager	Version 9.30
Microfocus Service Manager	Version 9.31
Microfocus Service Manager	Version 9.32
Microfocus Service Manager	Version 9.33
Microfocus Service Manager	Version 9.34
Microfocus Service Manager	Version 9.35
Microfocus Service Manager	Version 9.40
Microfocus Service Manager	Version 9.41
Microfocus Service Manager	Version 9.50
Microfocus Service Manager	Version 9.51

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176

Source: security@opentext.com

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.