MicrofocusCVELIST:CVE-2018-12468CVE-2018-12468 Arbitrary File Upload in GroupWise Administration Console
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.7%
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.
CNA Affected
[
{
"product": "GroupWise",
"vendor": "Micro Focus",
"versions": [
{
"lessThan": "18.0.2",
"status": "affected",
"version": "2018",
"versionType": "custom"
}
]
}
]Related
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.7%