CVE-2017-5187 Cross-site request forgery in Micro Focus Enterprise Developer, Micro Focus Enterprise Server
Remote attackers can exploit CSRF in the administration UI to view/alter configuration and inject OS commands, requiring immediate patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-5187?
CVE-2017-5187 is a high-severity vulnerability in Micro Focus Enterprise Developer, Micro Focus Enterprise Server, published on 21 Aug 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter (CWE-275) configuration information and inject OS commands (CWE-78) via forged requests.
Weakness: CWE-352
Which versions are affected by CVE-2017-5187?
It affects 4 products.
Products include Microfocus Directory Server, Microfocus Enterprise Developer, Microfocus Enterprise Server, Microfocus Enterprise Server Monitor and Control.
How do I fix CVE-2017-5187?
No fix has been published for CVE-2017-5187 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5187 being exploited?
There is no known exploitation of CVE-2017-5187 in the wild and no public exploit code.
Other vulnerabilities in Micro Focus Enterprise Developer, Micro Focus Enterprise Server
Sources
Also known as GHSA-f79g-3wgp-r89j.