« Volver al listado

CVE-2019-11653

Estado: ModificadaMedia (5.4)—

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Content Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-11653",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "Micro Focus",
          "product": "Content Manager",
          "versions": [
            {
              "status": "affected",
              "version": "9.1"
            },
            {
              "status": "affected",
              "version": "9.2"
            },
            {
              "status": "affected",
              "version": "9.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-08-07T17:15:12.167",
  "references": [
    {
      "url": "https://ashsecurity.wordpress.com/2019/07/09/cm-cve/",
      "source": "security@opentext.com"
    },
    {
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03489552",
      "source": "security@opentext.com"
    },
    {
      "url": "https://ashsecurity.wordpress.com/2019/07/09/cm-cve/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://softwaresupport.softwaregrp.com/doc/KM03489552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request."
    },
    {
      "lang": "es",
      "value": "Bypass de control de acceso remoto en Micro Focus Content Manager. versiones 9.1, 9.2, 9.3. La vulnerabilidad podría explotarse para manipular los datos almacenados durante la solicitud de CheckIn de otro usuario."
    }
  ],
  "lastModified": "2026-06-17T02:13:21.097",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EF956E8-9761-4550-B3D1-BFDBD09FFACB"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DA8E278-9C2F-4B69-A57F-0C3F9D359386"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF758355-2356-4635-8E8A-C0B0DD27B83D"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D83F4247-AE82-4A2E-AEB8-72F2ED660B8B"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.1.0:patch6_hotfix5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5151A7D7-205B-4A30-A397-EA082D916880"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.2.0:patch3_hotfix1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C2633E3-A0EE-4366-9F52-41E32F87E5CC"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.3.0:patch2_hotfix1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1354CAA5-1308-4C0F-B8F5-BF334F5E0C24"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:content_manager:9.3.0:patch2_hotfix2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1FB038F-85F3-4753-BC55-C09BA2C69FBB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}