CVE-2018-6491: MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability
Published Apr 23, 2018
·Updated
Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege.
Affected Software
8 affected components
Microfocus Ucmdb Configuration Manager=10.20
Microfocus Ucmdb Configuration Manager=10.21
Microfocus Ucmdb Configuration Manager=10.22
Microfocus Ucmdb Configuration Manager=10.30
Microfocus Ucmdb Configuration Manager=10.31
Microfocus Ucmdb Configuration Manager=10.32
Microfocus Ucmdb Configuration Manager=10.33
Microfocus Ucmdb Configuration Manager=11.00
Event History
Apr 23, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Apr 24, 2018
Data Sourced
via NVD·01:29 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6491?
CVE-2018-6491 is classified as a Local Escalation of Privilege vulnerability.
2
How do I fix CVE-2018-6491?
To mitigate CVE-2018-6491, upgrade to a non-vulnerable version of Micro Focus Universal CMDB Configuration Manager.
3
Which versions of Micro Focus Universal CMDB are affected by CVE-2018-6491?
CVE-2018-6491 affects versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, and 11.00 of Micro Focus Universal CMDB.
4
Can CVE-2018-6491 be exploited remotely?
Yes, CVE-2018-6491 can be exploited remotely, leading to local escalation of privileges.
5
What type of vulnerability is CVE-2018-6491?
CVE-2018-6491 is categorized as a Local Escalation of Privilege vulnerability.