CVE-2019-17087

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb

published December 11, 2019

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb. The vulnerability could be exploited to enumerate and download files from the filesystem of the system running AcuToWeb, with the privileges of the account AcuToWeb is running under.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01071 · 64.6th percentile
Published
2019-12-11T22:11Z
EPSS history
Timeline
  • 11 DEC 22:11Z
    Unauthorized file download vulnerability in all supported versions of Micro Focus AcuToWeb
    cvelistv5