PT-2019-12457 · Micro Focus · Micro Focus Verastream Host Integrator

Published 2019-08-23 · Updated 2021-05-12 · CVE-2019-11654

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Micro Focus Verastream Host Integrator (VHI) versions 7.7 SP2 and earlier

Description The issue allows remote unauthenticated attackers to read arbitrary files due to a path traversal vulnerability.

Recommendations For versions 7.7 SP2 and earlier, update to a version later than 7.7 SP2 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-11654

Affected Products

Micro Focus Verastream Host Integrator

References · 4

• https://osv.dev/vulnerability/CVE-2019-11654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11654 · Security Note
• https://t.me/cvenotify/14330 · Telegram Post
• https://support.microfocus.com/kb/doc.php?id=7024061 · Note