Solutions Business Manager (SBM) Unauthenticated remote code execution issue in version prior to 11.5
CVE-2018-19641

6.1MEDIUM

Key Information:

Vendor: Micro Focus
Status: Solutions Business Manager (sbm)
Vendor: CVE Published:; 27 March 2019

🔔 Create Micro Focus Vulnerability Alert

What is CVE-2018-19641?

Unauthenticated remote code execution issue in Micro Focus Solutions Business Manager (SBM) (formerly Serena Business Manager (SBM)) versions prior to 11.5.

Affected Version(s)

Solutions Business Manager (SBM) < 11.5

References

http://help.serena.com/doc_center/sbm/ver11_5/sbm_release...

x_refsource_CONFIRM

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

High

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 27, 2019
Vulnerability Reserved
Nov 28, 2018

Credit

Special thanks goes to Alessio Sergi of Verizon Enterprise Solutions for responsibly disclosing this CVE.