Vulnerability-Lookup

CVE-2018-6487 (GCVE-0-2018-6487)

Vulnerability from cvelistv5 – Published: 2018-02-20 21:00 – Updated: 2024-09-17 03:47

Title

MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information

Summary

Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Remote Disclosure of Information

Assigner

microfocus

References

1 reference

URL	Tags
https://softwaresupport.softwaregrp.com/document/…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Micro Focus	Universal CMDB Foundation Software	Affected: 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11

Date Public

2018-02-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:01:49.289Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Universal CMDB Foundation Software",
          "vendor": "Micro Focus",
          "versions": [
            {
              "status": "affected",
              "version": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"
            }
          ]
        }
      ],
      "datePublic": "2018-02-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Remote Disclosure of Information"
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Disclosure of Information",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-06T16:15:56.000Z",
        "orgId": "f81092c5-7f14-476d-80dc-24857f90be84",
        "shortName": "microfocus"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@microfocus.com",
          "DATE_PUBLIC": "2018-02-20T17:00:00.000Z",
          "ID": "CVE-2018-6487",
          "STATE": "PUBLIC",
          "TITLE": "MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Universal CMDB Foundation Software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Micro Focus"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Remote Disclosure of Information"
          }
        ],
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Remote Disclosure of Information"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
              "refsource": "CONFIRM",
              "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84",
    "assignerShortName": "microfocus",
    "cveId": "CVE-2018-6487",
    "datePublished": "2018-02-20T21:00:00.000Z",
    "dateReserved": "2018-02-01T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:47:56.039Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2018-6487",
      "date": "2026-07-23",
      "epss": "0.01903",
      "percentile": "0.77546"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1324B727-BD71-4D2E-A1D6-EC54B964F3BC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB293D81-C8D2-4816-8B89-198F2D784734\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFB38991-2D0B-4091-AFFD-990FF29A1012\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.11:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A3444897-9B0A-470C-9FFD-724C5F5D17DA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.20:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D82E0C0-E577-4BA5-984F-FCC34CA93AFF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.21:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"392E078A-158B-492C-8FB5-E1EE941B79C5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.22:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A5683A1-1AEA-4582-9039-17BA37FA6E8A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"863B49F2-E7D1-4A3A-A4FB-703BC27DB825\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"69DEDE9E-D591-4860-A897-1EF33C249A2F\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.\"}, {\"lang\": \"es\", \"value\": \"Divulgaci\\u00f3n remota de informaci\\u00f3n en Micro Focus Universal CMDB Foundation Software, versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. La vulnerabilidad se podr\\u00eda explotar de forma remota para permitir la divulgaci\\u00f3n de informaci\\u00f3n.\"}]",
      "id": "CVE-2018-6487",
      "lastModified": "2024-11-21T04:10:45.540",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"security@opentext.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2018-02-20T21:29:00.270",
      "references": "[{\"url\": \"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097\", \"source\": \"security@opentext.com\"}, {\"url\": \"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "security@opentext.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-200\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-6487\",\"sourceIdentifier\":\"security@opentext.com\",\"published\":\"2018-02-20T21:29:00.270\",\"lastModified\":\"2024-11-21T04:10:45.540\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.\"},{\"lang\":\"es\",\"value\":\"Divulgaci\u00f3n remota de informaci\u00f3n en Micro Focus Universal CMDB Foundation Software, versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. La vulnerabilidad se podr\u00eda explotar de forma remota para permitir la divulgaci\u00f3n de informaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"security@opentext.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1324B727-BD71-4D2E-A1D6-EC54B964F3BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB293D81-C8D2-4816-8B89-198F2D784734\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFB38991-2D0B-4091-AFFD-990FF29A1012\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3444897-9B0A-470C-9FFD-724C5F5D17DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D82E0C0-E577-4BA5-984F-FCC34CA93AFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"392E078A-158B-492C-8FB5-E1EE941B79C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A5683A1-1AEA-4582-9039-17BA37FA6E8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"863B49F2-E7D1-4A3A-A4FB-703BC27DB825\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"69DEDE9E-D591-4860-A897-1EF33C249A2F\"}]}]}],\"references\":[{\"url\":\"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097\",\"source\":\"security@opentext.com\"},{\"url\":\"https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}

CNVD-2018-06170

Vulnerability from cnvd - Published: 2018-03-23

Title

Micro Focus Universal CMDB Foundation Software敏感信息泄露漏洞

Description

Micro Focus Universal CMDB Foundation Software是英国Micro Focus公司的一套资源管理软件。该软件提供自底向上包括IT基础架构的自动发现、数据模型建立、服务映射定义和服务影响分析等功能。 Micro Focus Universal CMDB Foundation Software中存在信息泄露漏洞。远程攻击者可利用该漏洞获取信息。

Severity

中

Patch Name

Micro Focus Universal CMDB Foundation Software敏感信息泄露漏洞的补丁

Patch Description

Formal description

用户可参考如下厂商提供的安全补丁以修复该漏洞： https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097

Reference

https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097

Impacted products

Name
Micro Focus Universal CMDB Foundation Software

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-6487"
    }
  },
  "description": "Micro Focus Universal CMDB Foundation Software\u662f\u82f1\u56fdMicro Focus\u516c\u53f8\u7684\u4e00\u5957\u8d44\u6e90\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u81ea\u5e95\u5411\u4e0a\u5305\u62ecIT\u57fa\u7840\u67b6\u6784\u7684\u81ea\u52a8\u53d1\u73b0\u3001\u6570\u636e\u6a21\u578b\u5efa\u7acb\u3001\u670d\u52a1\u6620\u5c04\u5b9a\u4e49\u548c\u670d\u52a1\u5f71\u54cd\u5206\u6790\u7b49\u529f\u80fd\u3002\r\n\r\nMicro Focus Universal CMDB Foundation Software\u4e2d\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u4fe1\u606f\u3002",
  "discovererName": "unknwon",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-06170",
  "openTime": "2018-03-23",
  "patchDescription": "Micro Focus Universal CMDB Foundation Software\u662f\u82f1\u56fdMicro Focus\u516c\u53f8\u7684\u4e00\u5957\u8d44\u6e90\u7ba1\u7406\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u63d0\u4f9b\u81ea\u5e95\u5411\u4e0a\u5305\u62ecIT\u57fa\u7840\u67b6\u6784\u7684\u81ea\u52a8\u53d1\u73b0\u3001\u6570\u636e\u6a21\u578b\u5efa\u7acb\u3001\u670d\u52a1\u6620\u5c04\u5b9a\u4e49\u548c\u670d\u52a1\u5f71\u54cd\u5206\u6790\u7b49\u529f\u80fd\u3002\r\n\r\nMicro Focus Universal CMDB Foundation Software\u4e2d\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Micro Focus Universal CMDB Foundation Software\u654f\u611f\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Micro Focus Universal CMDB Foundation Software"
  },
  "referenceLink": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
  "serverity": "\u4e2d",
  "submitTime": "2018-03-02",
  "title": "Micro Focus Universal CMDB Foundation Software\u654f\u611f\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

FKIE_CVE-2018-6487

Vulnerability from fkie_nvd - Published: 2018-02-20 21:29 - Updated: 2026-06-17 02:01

Severity

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	security@opentext.com	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097
	af854a3a-2127-422b-91ae-364da2661108	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097

Impacted products

Vendor	Product	Version
microfocus	universal_cmdb_foundation_software	4.10
microfocus	universal_cmdb_foundation_software	4.11
microfocus	universal_cmdb_foundation_software	10.10
microfocus	universal_cmdb_foundation_software	10.11
microfocus	universal_cmdb_foundation_software	10.20
microfocus	universal_cmdb_foundation_software	10.21
microfocus	universal_cmdb_foundation_software	10.22
microfocus	universal_cmdb_foundation_software	10.30
microfocus	universal_cmdb_foundation_software	10.31

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Universal CMDB Foundation Software",
          "vendor": "Micro Focus",
          "versions": [
            {
              "status": "affected",
              "version": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"
            }
          ]
        }
      ],
      "source": "security@opentext.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "1324B727-BD71-4D2E-A1D6-EC54B964F3BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB293D81-C8D2-4816-8B89-198F2D784734",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "AFB38991-2D0B-4091-AFFD-990FF29A1012",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3444897-9B0A-470C-9FFD-724C5F5D17DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D82E0C0-E577-4BA5-984F-FCC34CA93AFF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "392E078A-158B-492C-8FB5-E1EE941B79C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A5683A1-1AEA-4582-9039-17BA37FA6E8A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "863B49F2-E7D1-4A3A-A4FB-703BC27DB825",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "69DEDE9E-D591-4860-A897-1EF33C249A2F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."
    },
    {
      "lang": "es",
      "value": "Divulgaci\u00f3n remota de informaci\u00f3n en Micro Focus Universal CMDB Foundation Software, versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. La vulnerabilidad se podr\u00eda explotar de forma remota para permitir la divulgaci\u00f3n de informaci\u00f3n."
    }
  ],
  "id": "CVE-2018-6487",
  "lastModified": "2026-06-17T02:01:53.930",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "security@opentext.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-02-20T21:29:00.270",
  "references": [
    {
      "source": "security@opentext.com",
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
    }
  ],
  "sourceIdentifier": "security@opentext.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-48R9-726W-JRH5

Vulnerability from github – Published: 2022-05-13 01:32 – Updated: 2022-05-13 01:32

Details

Severity

7.5 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2018-6487"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-02-20T21:29:00Z",
    "severity": "HIGH"
  },
  "details": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.",
  "id": "GHSA-48r9-726w-jrh5",
  "modified": "2022-05-13T01:32:02Z",
  "published": "2022-05-13T01:32:02Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6487"
    },
    {
      "type": "WEB",
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2018-6487

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2018-6487

Aliases

CVE-2018-6487

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2018-6487",
    "description": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.",
    "id": "GSD-2018-6487"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-6487"
      ],
      "details": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.",
      "id": "GSD-2018-6487",
      "modified": "2023-12-13T01:22:35.797027Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@microfocus.com",
        "DATE_PUBLIC": "2018-02-20T17:00:00.000Z",
        "ID": "CVE-2018-6487",
        "STATE": "PUBLIC",
        "TITLE": "MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Universal CMDB Foundation Software",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Micro Focus"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."
          }
        ]
      },
      "exploit": [
        {
          "lang": "eng",
          "value": "Remote Disclosure of Information"
        }
      ],
      "impact": {
        "cvss": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Remote Disclosure of Information"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
            "refsource": "CONFIRM",
            "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.20:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.11:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.21:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.22:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.31:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@suse.com",
          "ID": "CVE-2018-6487"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2019-10-09T23:41Z",
      "publishedDate": "2018-02-20T21:29Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2018-6487 (GCVE-0-2018-6487)

CNVD-2018-06170

FKIE_CVE-2018-6487

GHSA-48R9-726W-JRH5

GSD-2018-6487

Tags

Sightings

Nomenclature