Micro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege Escalation

SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ Micro Focus Filr Multiple Vulnerabilities 1. Advisory Information Title: Micro Focus Filr Multiple Vulnerabilities Advisory ID: SAUTH-2019-0001 Advisory URL:...

Micro Focus Filr Local Elevation of Privilege Vulnerability

Micro Focus Filr is a file access and sharing solution for businesses. A local elevation of privilege vulnerability exists in the famtd component in versions prior to Micro Focus Filr 3.0 Security Update 6. An attacker can exploit this vulnerability to elevate privileges to root...

Micro Focus Filr Path Traversal Vulnerability

Micro Focus Filr is a file access and sharing solution for businesses. A path traversal vulnerability exists in the web application component of Micro Focus Filr prior to version 3.0 Security Update 6. An attacker could exploit this vulnerability to download arbitrary files from the Filr server...

Micro Focus Filr 3.4.0.217 Path Traversal / Privilege Escalation Vulnerabilities

Micro Focus Filr version 3.4.0.217 suffers from privilege escalation and path traversal vulnerabilities. Micro Focus Filr Multiple Vulnerabilities 1. Advisory Information Title: Micro Focus Filr Multiple Vulnerabilities Advisory ID: SAUTH-2019-0001 Advisory URL:...

Path traversal

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

Privilege escalation

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3475

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3474

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3475

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3474

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3475 Local privilege escalation in Filr famtd

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3475

CVE-2019-3475 affects Micro Focus Filr 3.x (famtd) with a local privilege escalation allowing a low-privilege, authenticated user to gain root access. Impact documented as complete in confidentiality, integrity, and availability. Affected versions are all Filr 3.x before Security Update 6; remedi...

CVE-2019-3474

CVE-2019-3474 describes a path traversal vulnerability in the web application component of Micro Focus Filr 3.x. An attacker authenticated as a low-privilege user can download arbitrary files from the Filr server. The issue affects all Filr 3.x versions prior to Security Update 6. Public exploit ...

CVE-2019-3474 Path traversal vulnerability in Filr web application

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

PT-2019-16584

Name of the Vulnerable Software and Affected Versions Micro Focus Filr versions 3.x prior to Security Update 6 Description A path traversal issue in the web application component allows a remote attacker, authenticated as a low-privilege user, to download arbitrary files from the server...

Micro Focus Filr 3.4.0.217 Path Traversal / Privilege Escalation

SecureAuth - SecureAuth Labs Advisory http://www.secureauth.com/ Micro Focus Filr Multiple Vulnerabilities 1. Advisory Information Title: Micro Focus Filr Multiple Vulnerabilities Advisory ID: SAUTH-2019-0001 Advisory URL:...

PT-2019-16585

Name of the Vulnerable Software and Affected Versions Micro Focus Filr versions 3.0 through 3.x prior to Security Update 6 Description A local privilege escalation issue in the famtd component allows a local attacker authenticated as a low privilege user to escalate to root. Recommendations For...

CVE-2019-3475: Improper Privilege Management

A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

CVE-2019-3474: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6...

Novell Filr Cross-Site Request Forgery Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A cross-site request forgery vulnerability exists in the management interface in Novell Filr 2.0 Security Update 1 and prior versions and 1.2 Security Update 2. A remote attacker could exploit this vulnerabilit...