Micro Focus Client for Open Enterprise Server Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Micro Focus Client for Open Enterprise Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

Micro Focus Client for OES Buffer Overflow Vulnerability

Micro Focus Client for OES is a suite of server client software from Micro Focus UK. The software supports the transfer or authorization of files in platforms such as Windows Server. A buffer overflow vulnerability exists in the ncfsd.sys file in versions prior to Micro Focus Client for OES 2 SP4...

CVE-2018-7687

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys...

CVE-2018-7687

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys...

Buffer overflow

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys...

CVE-2018-7687 Client for OES Elevation of Privilege via Buffer Overflow

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys...

CVE-2018-7687

The CVE-2018-7687 entry concerns Micro Focus Client for Open Enterprise Server (OES) before version 2 SP4 IR8a, where a vulnerability in ncfsd.sys enables local privilege escalation via a buffer overflow. Public sources detail that exploitation requires prior low-priv code execution and abuses im...

Privilege escalation

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

CVE-2018-6491

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

CVE-2018-6491

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

Micro Focus Universal CMDB Elevation of Privilege Vulnerability

Universal CMDB UCMDB is a CMDB and discovery software product from Micro Focus. An elevation of privilege vulnerability exists in Micro Focus Universal CMDB. An attacker could exploit this vulnerability to achieve elevation of privilege...

CVE-2018-6491 MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

CVE-2018-6491

CVE-2018-6491 affects Micro Focus Universal CMDB (UCMDB) versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. Description: Local Escalation of Privilege vulnerability that could be remotely exploited to achieve Local Escalation of Privilege. Connected sources (e.g., ZDI-18-299) descri...

Micro Focus NetIQ Identity Manager Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus in the United Kingdom. The solution provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity...

A few words about Gartner’s “Magic Quadrant for Application Security Testing” 2018

February and March are the hot months for marketing reports. I already wrote about IDC and Forrester reports about Vulnerability Management-related markets. And this Monday, March 19, Gartner released new "Magic Quadrant for Application Security Testing". You can buy it on the official website fo...

Micro Focus Privileged Account Manager Information Disclosure Vulnerability

Micro Focus Privileged Account Manager PAM is a privileged user management solution from Micro Focus UK. The solution protects privileged account access to databases, applications and clouds. A security vulnerability exists in Micro Focus PAM versions 3.2 and 3.1. An attacker could exploit the...

Micro Focus Operations Orchestration Software Denial of Service Vulnerability

Micro Focus Operations Orchestration Software is a suite of IT process automation solutions from Micro Focus UK. The solution automates the management of IT tasks, operations and processes, as well as enhances audit compliance by generating documentation and reporting capabilities. A denial of...

Micro Focus Novell Access Manager Admin Console and IDP Server Open Redirect Vulnerability

Micro Focus Novell Access Manager is a comprehensive Web access management solution from Micro Focus, U.K. Admin Console is one of the management consoles, and IDP servers are one of the IDP servers. A security vulnerability exists in the Micro Focus Novell Access Manager Admin Console and IDP...

Micro Focus SUSE Linux Enterprise Server Competitive Conditions Vulnerability

Micro Focus SUSE Linux Enterprise Server is a suite of enterprise server edition Linux operating systems from Micro Focus in the UK. A competitive condition vulnerability exists in the postgresql init script in Micro Focus SUSE Linux Enterprise Server. An attacker can exploit this vulnerability t...

Micro Focus NetIQ eDirectory Login Restriction Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A...