From d950bd969837361e8b7a24a6e864218c0f583b1a Mon Sep 17 00:00:00 2001 From: Della Rocchetta Date: Tue, 20 Feb 2018 10:54:06 -0800 Subject: [PATCH] Adding CVE-2018-6487 --- 2018/6xxx/CVE-2018-6487.json | 93 +++++++++++++++++++++++++++++++----- 1 file changed, 81 insertions(+), 12 deletions(-) diff --git a/2018/6xxx/CVE-2018-6487.json b/2018/6xxx/CVE-2018-6487.json index a96c907fd82..16d5f356b0d 100644 --- a/2018/6xxx/CVE-2018-6487.json +++ b/2018/6xxx/CVE-2018-6487.json @@ -1,18 +1,87 @@ { - "CVE_data_meta" : { - "ASSIGNER" : "cve@mitre.org", - "ID" : "CVE-2018-6487", - "STATE" : "RESERVED" + "CVE_data_meta": { + "ASSIGNER": "security@microfocus.com", + "DATE_PUBLIC": "2018-02-20T17:00:00.000Z", + "ID": "CVE-2018-6487", + "STATE": "PUBLIC", + "TITLE": "MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information" }, - "data_format" : "MITRE", - "data_type" : "CVE", - "data_version" : "4.0", - "description" : { - "description_data" : [ + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "Universal CMDB Foundation Software", + "version": { + "version_data": [ + { + "version_name": "10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11" + } + ] + } + } + ] + }, + "vendor_name": "Micro Focus" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ { - "lang" : "eng", - "value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." + "lang": "eng", + "value": "Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information." } ] + }, + "exploit": [ + { + "lang": "eng", + "value": "Remote Disclosure of Information" + } + ], + "impact": { + "cvss": { + "attackComplexity": "LOW", + "attackVector": "NETWORK", + "availabilityImpact": "HIGH", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "privilegesRequired": "NONE", + "scope": "UNCHANGED", + "userInteraction": "NONE", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "version": "3.0" + } + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "Remote Disclosure of Information" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03091097" + } + ] + }, + "source": { + "discovery": "UNKNOWN" } -} +} \ No newline at end of file