CVE-2019-11653

{"id": "CVE-2019-11653", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2019-08-07T17:15:12.167", "references": [{"url": "https://ashsecurity.wordpress.com/2019/07/09/cm-cve/", "source": "security@opentext.com"}, {"url": "https://softwaresupport.softwaregrp.com/doc/KM03489552", "source": "security@opentext.com"}, {"url": "https://ashsecurity.wordpress.com/2019/07/09/cm-cve/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://softwaresupport.softwaregrp.com/doc/KM03489552", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user\u2019s CheckIn request."}, {"lang": "es", "value": "Bypass de control de acceso remoto en Micro Focus Content Manager. versiones 9.1, 9.2, 9.3. La vulnerabilidad podr\u00eda explotarse para manipular los datos almacenados durante la solicitud de CheckIn de otro usuario."}], "lastModified": "2024-11-21T04:21:32.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EF956E8-9761-4550-B3D1-BFDBD09FFACB"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DA8E278-9C2F-4B69-A57F-0C3F9D359386"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF758355-2356-4635-8E8A-C0B0DD27B83D"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D83F4247-AE82-4A2E-AEB8-72F2ED660B8B"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5151A7D7-205B-4A30-A397-EA082D916880"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.2.0:patch3_hotfix1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C2633E3-A0EE-4366-9F52-41E32F87E5CC"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.3.0:patch2_hotfix1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1354CAA5-1308-4C0F-B8F5-BF334F5E0C24"}, {"criteria": "cpe:2.3:a:microfocus:content_manager:9.3.0:patch2_hotfix2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1FB038F-85F3-4753-BC55-C09BA2C69FBB"}], "operator": "OR"}]}], "sourceIdentifier": "security@opentext.com"}