Privilege escalation

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

CVE-2018-6491

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

CVE-2018-6491

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

Micro Focus Universal CMDB Elevation of Privilege Vulnerability

Universal CMDB UCMDB is a CMDB and discovery software product from Micro Focus. An elevation of privilege vulnerability exists in Micro Focus Universal CMDB. An attacker could exploit this vulnerability to achieve elevation of privilege...

CVE-2018-6491

CVE-2018-6491 affects Micro Focus Universal CMDB (UCMDB) versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. Description: Local Escalation of Privilege vulnerability that could be remotely exploited to achieve Local Escalation of Privilege. Connected sources (e.g., ZDI-18-299) descri...

CVE-2018-6491 MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

Hewlett Packard Enterprise Universal CMDB Product Installation File Access Control Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privilege on vulnerable installations of Hewlett Packard Enterprise Universal CMDB. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Micro Focus Universal CMDB Arbitrary Code Execution Vulnerability

Micro Focus Universal CMDB is a resource management solution from Micro Focus in the United Kingdom. The solution provides bottom-up capabilities including IT infrastructure auto-discovery, data modeling, service mapping definition and service impact analysis, etc. Configuration Manager is one of...

Design/Logic Flaw

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution...

CVE-2018-6488

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution...

CVE-2018-6488 MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance

Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitrary Code Execution...

CVE-2018-6488

The CVE-2018-6488 entry concerns Micro Focus Universal CMDB (versions 4.10, 4.11, 4.12). The connected sources indicate an Arbitrary Code Execution vulnerability that could be exploited remotely, allowing an attacker to execute code on the affected system. The documents consistently describe the ...

CVE-2018-6487

Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information...

Design/Logic Flaw

Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information...

CVE-2018-6487

CVE-2018-6487 affects Micro Focus Universal CMDB Foundation Software (multiple versions: 10.10–10.31 and 4.10–4.11). The connected sources confirm a remote information disclosure vulnerability, but do not provide the technical root cause, exploit details, or concrete remediation steps within the ...

HPE Universal CMDB Remote Code Execution And XSS Vulnerabilities

The host is installed with HP Universal CMDB and is prone to remote cross site scripting and code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpeuniversalcmdbxssncodeexecvuln.nasl 7497 2017-10-19 07:06:06Z santu $ HPE Universal CMDB Remote Code Execution And XSS Vulnerabilities...

HPE Universal CMDB 'HTTP TRACE' Information Disclosure Vulnerability

The host is installed with HP Universal CMDB and is prone to an information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbhpeuniversalcmdbhttptraceinfodiscvuln.nasl 7497 2017-10-19 07:06:06Z santu $ HPE Universal CMDB 'HTTP TRACE' Information Disclosure Vulnerability Authors: Rinu...

HPE Universal CMDB Arbitrary Code Execution Vulnerability

HPE Universal CMDB is the Universal Management Configuration Database from Hewlett Packard Enterprise HPE, USA. An arbitrary code execution vulnerability exists in HPE Universal CMDB that could allow a remote attacker to execute arbitrary code via carefully crafted serialized Java objects...

HP/HPE/Micro Focus Universal CMDB RCE Vulnerability (HPESBGN03758)

HP/HPE/Micro Focus Universal CMDB is prone to a remote code execution RCE vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

Hewlett Packard Enterprise Universal CMDB UploadFileOnUIServerServlet Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Universal CMDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within UploadFileOnUIServerServlet servlet. The issue results from...