CVE-2019-11660 - Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40

Back Back to CVE browser

HIGH

Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40

Published Sep 13, 2019

7.8

HIGH

CVSS 3.1

EPSS 7.85%

Description

Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges.

Affected products

Vendor n/a Product Data Protector Default
n/a
- Version
  10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Data Protector

n/a

Version	Status	Constraints
10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-426

References (3)

http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3330
Advisory
https://softwaresupport.softwaregrp.com/doc/KM03525630
x_refsource_CONFIRM

Link	Providers	Tags
http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3330		Advisory
https://softwaresupport.softwaregrp.com/doc/KM03525630		x_refsource_CONFIRM