CVE-2019-3475
HIGHMicro Focus Filr 3.x < Security Update 6 - Authenticated Local Privilege Escalation via famtd Component
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-3475. PoCs published by SecureAuth.
AI-analyzed exploit summary The exploit demonstrates a path traversal vulnerability (CVE-2019-3474) and a local privilege escalation (CVE-2019-3475) in Micro Focus Filr. The path traversal allows reading arbitrary files, while the LPE involves replacing a daemon binary to gain root access.
Description
A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
Exploits (1)
The exploit demonstrates a path traversal vulnerability (CVE-2019-3474) and a local privilege escalation (CVE-2019-3475) in Micro Focus Filr. The path traversal allows reading arbitrary files, while the LPE involves replacing a daemon binary to gain root access.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H