cnvd - cnvd-2018-13200

cnvd-2018-13200

Vulnerability from cnvd

Title: Fortify Software Security Center (SSC) XXE漏洞

Description:

Micro Focus Fortify Software Security Center（SSC）是英国Micro Focus公司一套软件安全管理平台。

Fortify Software Security Center (SSC)存在XXE漏洞，允许远程未经身份验证的用户通过XML请求中的精心设计的DTD读取任意文件或进行服务器端请求伪造（SSRF）攻击。

Severity: 高

Patch Name: Fortify Software Security Center (SSC) XXE漏洞的补丁

Patch Description:

Micro Focus Fortify Software Security Center（SSC）是英国Micro Focus公司一套软件安全管理平台。

Fortify Software Security Center (SSC)存在XXE漏洞，允许远程未经身份验证的用户通过XML请求中的精心设计的DTD读取任意文件或进行服务器端请求伪造（SSRF）攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可联系供应商获得补丁信息： https://www.microfocus.com

Reference: https://nvd.nist.gov/vuln/detail/CVE-2018-12463 http://seclists.org/fulldisclosure/2018/Jul/51

Impacted products

Name
['Micro Focus Fortify Software Security Center 17.1', 'Micro Focus Fortify Software Security Center 17.2', 'Micro Focus Fortify Software Security Center 18.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-12463"
    }
  },
  "description": "Micro Focus Fortify Software Security Center\uff08SSC\uff09\u662f\u82f1\u56fdMicro Focus\u516c\u53f8\u4e00\u5957\u8f6f\u4ef6\u5b89\u5168\u7ba1\u7406\u5e73\u53f0\u3002 \r\n\r\nFortify Software Security Center (SSC)\u5b58\u5728XXE\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u901a\u8fc7XML\u8bf7\u6c42\u4e2d\u7684\u7cbe\u5fc3\u8bbe\u8ba1\u7684DTD\u8bfb\u53d6\u4efb\u610f\u6587\u4ef6\u6216\u8fdb\u884c\u670d\u52a1\u5668\u7aef\u8bf7\u6c42\u4f2a\u9020\uff08SSRF\uff09\u653b\u51fb\u3002",
  "discovererName": "alt3kx",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://www.microfocus.com",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-13200",
  "openTime": "2018-07-16",
  "patchDescription": "Micro Focus Fortify Software Security Center\uff08SSC\uff09\u662f\u82f1\u56fdMicro Focus\u516c\u53f8\u4e00\u5957\u8f6f\u4ef6\u5b89\u5168\u7ba1\u7406\u5e73\u53f0\u3002 \r\n\r\nFortify Software Security Center (SSC)\u5b58\u5728XXE\u6f0f\u6d1e\uff0c\u5141\u8bb8\u8fdc\u7a0b\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u901a\u8fc7XML\u8bf7\u6c42\u4e2d\u7684\u7cbe\u5fc3\u8bbe\u8ba1\u7684DTD\u8bfb\u53d6\u4efb\u610f\u6587\u4ef6\u6216\u8fdb\u884c\u670d\u52a1\u5668\u7aef\u8bf7\u6c42\u4f2a\u9020\uff08SSRF\uff09\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Fortify Software Security Center (SSC) XXE\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Micro Focus Fortify Software Security Center 17.1",
      "Micro Focus Fortify Software Security Center 17.2",
      "Micro Focus Fortify Software Security Center 18.1"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-12463\r\nhttp://seclists.org/fulldisclosure/2018/Jul/51",
  "serverity": "\u9ad8",
  "submitTime": "2018-07-16",
  "title": "Fortify Software Security Center (SSC) XXE\u6f0f\u6d1e"
}

CVE-2018-12463 (GCVE-0-2018-12463)

Vulnerability from cvelistv5

Published

2018-07-12 16:00

Modified

2024-09-16 22:46

Severity ?

7.3 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

Server-side Request Forgery (SSRF)

Summary

An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1041286	vdb-entry, x_refsource_SECTRACK
	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/45027/	exploit, x_refsource_EXPLOIT-DB

Impacted products

	Vendor	Product	Version
	Micro Focus	Fortify Software Security Center	Version: 17.1, 17.2, 18.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:38:05.751Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1041286",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041286"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563"
          },
          {
            "name": "45027",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45027/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Fortify Software Security Center",
          "vendor": "Micro Focus",
          "versions": [
            {
              "status": "affected",
              "version": "17.1, 17.2, 18.1"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Micro Focus would like to extend a special thanks to Alex Hernandez aka alt3kx for responsibly disclosing this vulnerability."
        }
      ],
      "datePublic": "2018-07-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Server-side Request Forgery (SSRF)"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Server-side Request Forgery (SSRF)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:45",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "name": "1041286",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041286"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563"
        },
        {
          "name": "45027",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45027/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "DATE_PUBLIC": "2018-07-12T14:30:00.000Z",
          "ID": "CVE-2018-12463",
          "STATE": "PUBLIC",
          "TITLE": "MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Fortify Software Security Center",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "17.1, 17.2, 18.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micro Focus"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Micro Focus would like to extend a special thanks to Alex Hernandez aka alt3kx for responsibly disclosing this vulnerability."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Server-side Request Forgery (SSRF)"
          }
        ],
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Server-side Request Forgery (SSRF)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1041286",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041286"
            },
            {
              "name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563",
              "refsource": "CONFIRM",
              "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03201563"
            },
            {
              "name": "45027",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45027/"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2018-12463",
    "datePublished": "2018-07-12T16:00:00Z",
    "dateReserved": "2018-06-15T00:00:00",
    "dateUpdated": "2024-09-16T22:46:15.424Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted