CVE-2018-6496

Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow for remote unsafe deserialization and cross-site request forgery (CSRF).

Score

CVSS 3.1 8.8 High

Status

Modified - security@opentext.com

Published

2018-06-16

Last modified

2024-08-05

Weaknesses

CWE-352, CWE-502

Affected products

• Ucmdb Browser (Micro Focus)
• Universal Cmbd Browser (Microfocus)

References

• http://www.securityfocus.com/bid/104483
• http://www.securitytracker.com/id/1041139
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03180066