CVE-2018-18593

{"id": "CVE-2018-18593", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "security@opentext.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-12-31T15:29:00.287", "references": [{"url": "http://www.securityfocus.com/bid/106374", "source": "security@opentext.com"}, {"url": "https://softwaresupport.softwaregrp.com/doc/KM03309650", "source": "security@opentext.com"}, {"url": "http://www.securityfocus.com/bid/106374", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://softwaresupport.softwaregrp.com/doc/KM03309650", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information"}, {"lang": "es", "value": "Saltos de directorio remotos y la divulgaci\u00f3n de informaci\u00f3n privilegiada remota en UCMDB Configuration Management Service en sus versiones 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08 y 2018.11. Las vulnerabilidades podr\u00edan permitir saltos de directorio y la divulgaci\u00f3n de informaci\u00f3n privilegiada remota."}], "lastModified": "2024-11-21T03:56:13.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00348879-766F-4CBA-9761-AE4E258CA7EB"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "346A18A2-540C-4F17-BF34-1E5EEEC07D14"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83128A67-03F8-4B35-8F06-7F2E4B249E80"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D845A099-B07F-418B-AF1A-31CB55177D10"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDEA9704-D957-430B-A385-DABE05105D7F"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "299EB23B-E31C-4F60-94DD-42601C5712C1"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "850CDC6A-1F0F-4C8B-9EAA-8B761E1B125C"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.22:cup7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5F13FCA-3A25-4723-86B4-5FE45891C284"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F603D53-4D81-436F-BFC7-70702780B9C6"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB8CB58E-0A63-4A3C-8159-35CA933E03E9"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5AB8C9C-E85E-4EFB-B6A1-811154FC152F"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:10.33:cup3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D94222DA-E445-444E-BCAE-248EBAA43478"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB4457B8-AC0A-4156-BCCF-193D51FF0823"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D61129A2-97E1-4F37-B0C7-0A623FF1EF98"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.08:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09094DD7-FC42-4CD0-82D0-64225257363C"}, {"criteria": "cpe:2.3:a:hp:ucmdb_configuration_manager:2018.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0514279C-C46F-4ED5-9058-490E3FEE1B1F"}], "operator": "OR"}]}], "sourceIdentifier": "security@opentext.com"}