Published: 13/12/2018 Updated: 21/11/2024

A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center (SSC), versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access

Vulnerable Product	Search on Vulmon	Subscribe to Product
microfocus fortify software security center 17.10
microfocus fortify software security center 17.20
microfocus fortify software security center 18.10

Fortify Software Security Center versions 1710, 1720, and 1810 suffer from an insecure direct object reference vulnerability related to extracting local and ldap users ...

Details ================ Software: Fortify SSC (Software Security Center) Version: 1710, 1720 & 1810 Homepage: [wwwmicrofocuscom](wwwmicrofocuscom/) Advisory report: githubcom/alt3kx/CVE-2018-7691 CVE: CVE-2018-7691 at cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2018-7691 CVSS: 65 (Medium; AV:N/AC:L/PR:L/ ...

The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities in Fortify Software Security Center (SSC) 17.10, 17.20 & 18.10

CVE-2018-7691 The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method Exploit-DB publication at wwwexploit-dbcom/exploits/45990 PacketStorm publication at https:

NVD-CWE-noinfo https://nvd.nist.gov https://github.com/alt3kx/CVE-2018-7691 http://seclists.org/fulldisclosure/2018/Dec/27 https://www.first.org/epss https://softwaresupport.softwaregrp.com/doc/KM03298201 https://www.exploit-db.com/exploits/45990/https://softwaresupport.softwaregrp.com/doc/KM03298201 https://www.exploit-db.com/exploits/45990/

CVE-2018-7691

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect