CVE-2018-6487

{"containers": {"cna": {"affected": [{"product": "Universal CMDB Foundation Software", "vendor": "Micro Focus", "versions": [{"status": "affected", "version": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"}]}], "datePublic": "2018-02-20T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."}], "exploits": [{"lang": "en", "value": "Remote Disclosure of Information"}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Remote Disclosure of Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-06T16:15:56.000Z", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"}], "source": {"discovery": "UNKNOWN"}, "title": "MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "DATE_PUBLIC": "2018-02-20T17:00:00.000Z", "ID": "CVE-2018-6487", "STATE": "PUBLIC", "TITLE": "MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Universal CMDB Foundation Software", "version": {"version_data": [{"version_value": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"}]}}]}, "vendor_name": "Micro Focus"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."}]}, "exploit": [{"lang": "en", "value": "Remote Disclosure of Information"}], "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Disclosure of Information"}]}]}, "references": {"reference_data": [{"name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097", "refsource": "CONFIRM", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T06:01:49.289Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"}]}]}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2018-6487", "datePublished": "2018-02-20T21:00:00.000Z", "dateReserved": "2018-02-01T00:00:00.000Z", "dateUpdated": "2024-09-17T03:47:56.039Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Universal CMDB Foundation Software", "vendor": "Micro Focus", "versions": [{"status": "affected", "version": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"}]}], "source": "security@opentext.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.10:*:*:*:*:*:*:*", "matchCriteriaId": "1324B727-BD71-4D2E-A1D6-EC54B964F3BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.11:*:*:*:*:*:*:*", "matchCriteriaId": "BB293D81-C8D2-4816-8B89-198F2D784734", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.10:*:*:*:*:*:*:*", "matchCriteriaId": "AFB38991-2D0B-4091-AFFD-990FF29A1012", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.11:*:*:*:*:*:*:*", "matchCriteriaId": "A3444897-9B0A-470C-9FFD-724C5F5D17DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.20:*:*:*:*:*:*:*", "matchCriteriaId": "6D82E0C0-E577-4BA5-984F-FCC34CA93AFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.21:*:*:*:*:*:*:*", "matchCriteriaId": "392E078A-158B-492C-8FB5-E1EE941B79C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.22:*:*:*:*:*:*:*", "matchCriteriaId": "4A5683A1-1AEA-4582-9039-17BA37FA6E8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.30:*:*:*:*:*:*:*", "matchCriteriaId": "863B49F2-E7D1-4A3A-A4FB-703BC27DB825", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.31:*:*:*:*:*:*:*", "matchCriteriaId": "69DEDE9E-D591-4860-A897-1EF33C249A2F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."}, {"lang": "es", "value": "Divulgaci\u00f3n remota de informaci\u00f3n en Micro Focus Universal CMDB Foundation Software, versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. La vulnerabilidad se podr\u00eda explotar de forma remota para permitir la divulgaci\u00f3n de informaci\u00f3n."}], "id": "CVE-2018-6487", "lastModified": "2026-06-17T02:01:53.930", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@opentext.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-02-20T21:29:00.270", "references": [{"source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}