CVE-2019-3475 Local privilege escalation in Filr famtd
A local attacker can escalate privileges to root in Micro Focus Filr via the famtd component, requiring a patch to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3475?
CVE-2019-3475 is a high-severity vulnerability in Micro Focus Filr, published on 20 Feb 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.
Which versions are affected by CVE-2019-3475?
It affects 1 product.
Products include Microfocus Filr.
How do I fix CVE-2019-3475?
No fix has been published for CVE-2019-3475 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3475 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-3475 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Micro Focus Filr
- CVE-2023-32268 Administrator equivalent Filr user can access proxy administrator credentials
- CVE-2020-25838 Information disclosure in Filr
- CVE-2019-3474 Path traversal vulnerability in Filr web application
- CVE-2020-25832 Cross-site scripting in Filr
- CVE-2022-38755 Filr Remote unauthenticated user enumeration for versions prior to 4.3.1.1
Sources
Also known as GHSA-qv97-2p9c-m794.