CVE-2018-6497 MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF
HighCVSS 8.8
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 and CMS Server version 2018.05 BACKGROUND which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus cms server | = 2018.05 | No fix listed |
| microfocus universal cmbd server | >= 10.20, <= 11.0 | No fix listed |
| micro focus Universal CMDB Server | = DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31, 10.32, 10.33, 10.33 CUP2, 11.0 | No fix listed |
| micro focus CMS Server | = 2018.05 BACKGROUND | No fix listed |
References
- 1041140 vdb-entry
- softwaresupport.softwaregrp.com