PT-2018-17582 · Micro Focus · Micro Focus Universal Cmdb

Published 2018-04-12 · Updated 2019-10-09 · CVE-2018-6491

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Universal CMDB versions 10.20 through 11.00

Description The issue concerns a Local Escalation of Privilege, which could potentially be remotely exploited. This allows for privilege escalation, posing a security risk.

Recommendations For Micro Focus Universal CMDB versions 10.20 through 11.00, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-6491

ZDI-18-299

Affected Products

Micro Focus Universal Cmdb

References · 5

• https://zerodayinitiative.com/advisories/ZDI-18-299 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-6491 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6491 · Vendor Advisory
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03141180 · Note
• http://securitytracker.com/id/1040680 · Note