CVE-2019-11660

CVE-2019-11660 affects Micro Focus Data Protector (versions 10.00–10.40). A low-privilege user can abuse the SUID binary omniresolve, which calls oracleasm via a relative path using a trusted PATH, to execute a custom binary with root privileges. Impact is local privilege escalation (affecting co...

CVE-2021-22517

CVE-2021-22517 affects Micro Focus Data Protector. The provided documents consistently identify a potential unauthorized privilege escalation that could allow a privileged user to gain unauthorized access to data. Affected versions include 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 1...

CVE-2019-3476

CVE-2019-3476 involves Micro Focus Data Protector, affected version 10.03, with remote arbitrary code execution. According to the provided documents, the vulnerability allows network-triggered code execution with low attack complexity and no authentication (CVSS: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...