CVE-2019-3474: Path traversal vulnerability in Filr web application

Published Feb 20, 2019

Updated

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.

Affected Software

14 affected components

Microfocus Filr=3.0

Microfocus Filr=3.0-update_1

Microfocus Filr=3.0-update_2

Microfocus Filr=3.0-update_3

Microfocus Filr=3.0-update_4

Microfocus Filr=3.0-update_5

SUSE SUSE Linux Enterprise Server=11

All of the following

Any of the following

Microfocus Filr=3.0

Microfocus Filr=3.0-update_1

Microfocus Filr=3.0-update_2

Microfocus Filr=3.0-update_3

Microfocus Filr=3.0-update_4

Microfocus Filr=3.0-update_5

SUSE SUSE Linux Enterprise Server=11

Event History

Feb 20, 2019

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-3474?

CVE-2019-3474 is a path traversal vulnerability in the web application component of Micro Focus Filr 3.x that allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server.

Which versions of Filr are affected by CVE-2019-3474?

CVE-2019-3474 affects all versions of Filr 3.x prior to Security Update 6.

How severe is CVE-2019-3474?

CVE-2019-3474 has a severity score of 6.5 (medium).

How can I fix CVE-2019-3474?

To fix CVE-2019-3474, you should install Security Update 6 for Filr 3.x.

Where can I find more information about CVE-2019-3474?

You can find more information about CVE-2019-3474 at the following links: [1] [2] [3]