Vulnerability Description
Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, could lead to remote code execution.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Solutions Business Manager | < 11.4 |
Related Weaknesses (CWE)
References
- http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
- http://help.serena.com/doc_center/sbm/ver11_4/sbm_release_notes.htm
FAQ
What is CVE-2018-7679?
CVE-2018-7679 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Micro Focus Solutions Business Manager versions prior to 11.4 when ASP.NET is configured with execute permission on the virtual directories and does not validate the contents of user avatar images, co...
How severe is CVE-2018-7679?
CVE-2018-7679 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-7679?
Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Solutions Business Manager.