Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-18593

Remote Directory Traversal and Remote Disclosure of Privileged Information in UCMDB Configuration Management Service, version 10.22, 10.22 CUP1, 10.22 CUP2, 10.22 CUP3, 10.22 CUP4, 10.22 CUP5, 10.22 CUP6, 10.22 CUP7, 10.33, 10.33 CUP1, 10.33 CUP2, 10.33 CUP3, 2018.02, 2018.05, 2018.08, 2018.11. The vulnerabilities could allow Remote Directory Traversal and Remote Disclosure of Privileged Information

Published

2018-12-31T15:29:00.287

Last Modified

2024-11-21T03:56:13.250

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.22 Yes
Application hp ucmdb_configuration_manager 10.33 Yes
Application hp ucmdb_configuration_manager 10.33 Yes
Application hp ucmdb_configuration_manager 10.33 Yes
Application hp ucmdb_configuration_manager 10.33 Yes
Application hp ucmdb_configuration_manager 2018.02 Yes
Application hp ucmdb_configuration_manager 2018.05 Yes
Application hp ucmdb_configuration_manager 2018.08 Yes
Application hp ucmdb_configuration_manager 2018.11 Yes
References