« Volver al listado

CVE-2018-18591

Estado: ModificadaMedia (6.5)—

A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Service Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-18591",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security@opentext.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 6.8,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4,
        "exploitabilityScore": 2.3
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "Micro Focus",
          "product": "Micro Focus Service Manager",
          "versions": [
            {
              "status": "affected",
              "version": "9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-11-13T13:29:00.183",
  "references": [
    {
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176",
      "source": "security@opentext.com"
    },
    {
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286176",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una potencial divulgación de datos en Micro Focus Service Manager en versiones 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50 y 9.51. La vulnerabilidad podría ser explotada para divulgar datos de forma no autorizada."
    }
  ],
  "lastModified": "2026-06-17T01:47:33.647",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D57D0FD-8C39-4FBE-9FFF-CA64AB46EB9E"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAA92971-1EDA-4DE5-B39F-F47E48CA18A1"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.32:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9946A3FE-95BC-4956-A30F-7342735544C9"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.33:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59CBE599-6A78-46D0-B849-2C4D559765FF"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.34:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27319CF5-AB47-4AC6-83B7-3D54E614D4F2"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.35:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB17FF7C-BED0-4F75-8222-1491C5DB74A8"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "605746BD-70F7-4F35-ABB9-2A3A3475254C"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.41:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B647A2C-46B2-4BE3-9361-C7C276404D77"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06C07728-DD28-4DA1-8BB4-0C8580F341A5"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:service_manager:9.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF34890E-CF4B-47A5-A051-0E4253E943F3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}