What is CVE-2019-17087?

CVE-2019-17087 is a high-severity vulnerability in Microfocus Acutoweb. CVSS score: 7.5/10. Published 2019-12-11.

How severe is CVE-2019-17087?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Microfocus Acutoweb

CVE-2019-17087

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.

EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Microfocus Acutoweb
Micro Focus International Acutoweb — versions All supported versions

References

security@opentext.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-17087?: CVE-2019-17087 is a high-severity vulnerability in Microfocus Acutoweb. CVSS score: 7.5/10. Published 2019-12-11.
How severe is CVE-2019-17087?: High severity. CVSS v3 base score is 7.5 out of 10.