PT-2018-11199 · Micro Focus · Groupwise

Publicado 2018-08-01 · Atualizado 2019-10-09 · CVE-2018-12468

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus GroupWise versions prior to 18.0.2

Description A remote attacker authenticated as an administrator may be able to upload files to an arbitrary path on the server, potentially resulting in remote code execution.

Recommendations For versions prior to 18.0.2, update to version 18.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the administration console to minimize the risk of exploitation.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2018-12468

Produtos afetados

Groupwise

Referências · 3

• https://novell.com/support/kb/doc.php?id=7023223 · Nota
• https://osv.dev/vulnerability/CVE-2018-12468 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-12468 · Nota de Segurança