medium6.5Public exploit code
CVE-2019-3474
A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to downl…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Micro Focus Filr 3.4.0.217 - Path Traversal / Local Privilege Escalation2019-02-22 · webapps · linux · Verified
Impact
A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microfocus | Filr | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.novell.com/Download?buildid=nZUCSDkvpxk~
- https://support.microfocus.com/kb/doc.php?id=7023726
- https://www.exploit-db.com/exploits/46450/
- https://download.novell.com/Download?buildid=nZUCSDkvpxk~
- https://support.microfocus.com/kb/doc.php?id=7023726
- https://www.exploit-db.com/exploits/46450/