Vulnerability Details CVE-2019-11660
Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.282
EPSS Ranking 96.3%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html
- https://softwaresupport.softwaregrp.com/doc/KM03525630
- http://packetstormsecurity.com/files/155076/Micro-Focus-HPE-Data-Protector-SUID-Privilege-Escalation.html
- https://softwaresupport.softwaregrp.com/doc/KM03525630
Products affected by CVE-2019-11660
-
cpe:2.3:a:microfocus:data_protector:10.0
-
cpe:2.3:a:microfocus:data_protector:10.00
-
cpe:2.3:a:microfocus:data_protector:10.01
-
cpe:2.3:a:microfocus:data_protector:10.02
-
cpe:2.3:a:microfocus:data_protector:10.03
-
cpe:2.3:a:microfocus:data_protector:10.04
-
cpe:2.3:a:microfocus:data_protector:10.10
-
cpe:2.3:a:microfocus:data_protector:10.20
-
cpe:2.3:a:microfocus:data_protector:10.30
-
cpe:2.3:a:microfocus:data_protector:10.40