« Volver al listado

CVE-2018-6487

Estado: ModificadaAlta (7.5)—

Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Universal Cmdb Foundation Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-6487",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security@opentext.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "Micro Focus",
          "product": "Universal CMDB Foundation Software",
          "versions": [
            {
              "status": "affected",
              "version": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-02-20T21:29:00.270",
  "references": [
    {
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
      "source": "security@opentext.com"
    },
    {
      "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information."
    },
    {
      "lang": "es",
      "value": "Divulgación remota de información en Micro Focus Universal CMDB Foundation Software, versiones 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. La vulnerabilidad se podría explotar de forma remota para permitir la divulgación de información."
    }
  ],
  "lastModified": "2026-06-17T02:01:53.930",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1324B727-BD71-4D2E-A1D6-EC54B964F3BC"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:4.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB293D81-C8D2-4816-8B89-198F2D784734"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AFB38991-2D0B-4091-AFFD-990FF29A1012"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3444897-9B0A-470C-9FFD-724C5F5D17DA"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D82E0C0-E577-4BA5-984F-FCC34CA93AFF"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "392E078A-158B-492C-8FB5-E1EE941B79C5"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A5683A1-1AEA-4582-9039-17BA37FA6E8A"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "863B49F2-E7D1-4A3A-A4FB-703BC27DB825"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:universal_cmdb_foundation_software:10.31:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69DEDE9E-D591-4860-A897-1EF33C249A2F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}