diff --git a/2018/18xxx/CVE-2018-18593.json b/2018/18xxx/CVE-2018-18593.json index 22f7a6a29e7..f80d375d227 100644 --- a/2018/18xxx/CVE-2018-18593.json +++ b/2018/18xxx/CVE-2018-18593.json @@ -1,9 +1,40 @@ { "CVE_data_meta" : { - "ASSIGNER" : "cve@mitre.org", + "ASSIGNER" : "security@microfocus.com", + "DATE_PUBLIC" : "2018-12-31T13:16:00.000Z", "ID" : "CVE-2018-18593", - "STATE" : "RESERVED" + "STATE" : "PUBLIC", + "TITLE" : "MFSBGN03838 rev.1 - UCMDB Configuration Management Service, Multiple Vulnerabilities" }, + "affects" : { + "vendor" : { + "vendor_data" : [ + { + "product" : { + "product_data" : [ + { + "product_name" : "UCMDB Configuration Management Service", + "version" : { + "version_data" : [ + { + "version_value" : "10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11" + } + ] + } + } + ] + }, + "vendor_name" : "Micro Focus" + } + ] + } + }, + "credit" : [ + { + "lang" : "eng", + "value" : "Micro Focus would like to thank Bahadir Pektas and Emre Ilbeyoglu for reporting this issue to security@microfocus.com." + } + ], "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", @@ -11,8 +42,53 @@ "description_data" : [ { "lang" : "eng", - "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "value" : " Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11.\nThe vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information" } ] + }, + "exploit" : [ + { + "lang" : "eng", + "value" : " Remote Directory Traversal and Remote Disclosure of Privileged Information" + } + ], + "impact" : { + "cvss" : { + "attackComplexity" : "LOW", + "attackVector" : "NETWORK", + "availabilityImpact" : "NONE", + "baseScore" : 6.5, + "baseSeverity" : "MEDIUM", + "confidentialityImpact" : "HIGH", + "integrityImpact" : "HIGH", + "privilegesRequired" : "HIGH", + "scope" : "UNCHANGED", + "userInteraction" : "NONE", + "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", + "version" : "3.0" + } + }, + "problemtype" : { + "problemtype_data" : [ + { + "description" : [ + { + "lang" : "eng", + "value" : " Remote Directory Traversal and Remote Disclosure of Privileged Information" + } + ] + } + ] + }, + "references" : { + "reference_data" : [ + { + "refsource" : "CONFIRM", + "url" : "https://softwaresupport.softwaregrp.com/doc/KM03309650" + } + ] + }, + "source" : { + "discovery" : "UNKNOWN" } }