Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-3489

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authen

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus Micro Focus Content Manager

  • 9.1affected
  • 9.2affected
  • 9.3affected

References