Remote code execution

2018-06-2119:29:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.3%

JSON

Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.

CPENameOperatorVersion
solutions_business_managerlt11.4

CPE	Name	Operator	Version
	solutions_business_manager	lt	11.4

References

help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm