CVE-2019-11653

Published: Aug 7, 2019Modified: Jun 17, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request.

Affected (8)

Products: Microfocus: Content Manager

Microfocus

1 product

Content Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microfocus Content Manager	Version 9.1.0 patch6_hotfix1
Microfocus Content Manager	Version 9.1.0 patch6_hotfix2
Microfocus Content Manager	Version 9.1.0 patch6_hotfix3
Microfocus Content Manager	Version 9.1.0 patch6_hotfix4
Microfocus Content Manager	Version 9.1.0 patch6_hotfix5
Microfocus Content Manager	Version 9.2.0 patch3_hotfix1
Microfocus Content Manager	Version 9.3.0 patch2_hotfix1
Microfocus Content Manager	Version 9.3.0 patch2_hotfix2

References (4)

https://ashsecurity.wordpress.com/2019/07/09/cm-cve/

Source: security@opentext.com

https://softwaresupport.softwaregrp.com/doc/KM03489552

Source: security@opentext.com

https://ashsecurity.wordpress.com/2019/07/09/cm-cve/

Source: af854a3a-2127-422b-91ae-364da2661108

https://softwaresupport.softwaregrp.com/doc/KM03489552

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.