Riskcovery

CVE-2019-3489

State
Published
Severity
Not scored
Published
Apr 1, 2019
Updated
Aug 4, 2024
Reserved
Dec 31, 2018

Read the record on cve.org

Description

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to arbitrary locations on the Content Manager server.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Micro Focus Content ManagerMicro Focus
  • 9.1Affected
  • 9.2Affected
  • 9.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.