CVE-2019-3475
First published: Wed Feb 20 2019(Updated: )
A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
Credit: security@microfocus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus Filr | =3.0 | |
| Microfocus Filr | =3.0-update_1 | |
| Microfocus Filr | =3.0-update_2 | |
| Microfocus Filr | =3.0-update_3 | |
| Microfocus Filr | =3.0-update_4 | |
| Microfocus Filr | =3.0-update_5 | |
| SUSE SUSE Linux Enterprise Server | =11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2019-3475.
What is the severity of CVE-2019-3475?
The severity of CVE-2019-3475 is high with a CVSS score of 7.8.
What is the affected software of CVE-2019-3475?
The affected software of CVE-2019-3475 is Micro Focus Filr 3.0.
How can a local attacker escalate their privileges using CVE-2019-3475?
A local attacker authenticated as a low privilege user can escalate to root using CVE-2019-3475.
How can I fix CVE-2019-3475?
You can fix CVE-2019-3475 by applying Security Update 6 for Filr 3.x.
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microfocus
- canonical/microfocus filr
- version/microfocus filr/3.0
- version/microfocus filr/3.0-update_1
- version/microfocus filr/3.0-update_2
- version/microfocus filr/3.0-update_3
- version/microfocus filr/3.0-update_4
- version/microfocus filr/3.0-update_5
- vendor/suse
- canonical/suse suse linux enterprise server
- version/suse suse linux enterprise server/11