CVE-2017-5182 - CVE House

Back to Database

Status published High CVE-2017-5182

Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote...

7.5 CVSS

Vulnerability Description

Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted URL, that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux, it applies to OES2015 SP1 before Maintenance Update 11080, OES2015 before Maintenance Update 11079, OES11 SP3 before Maintenance Update 11078, OES11 SP2 before Maintenance Update 11077).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-5182

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Micro Focus International

View All →

An SQL injection vulnerability was discovered in Micro Focus Service...

A stored XSS vulnerability was discovered in Micro Focus Vibe,...

HTTP methods reveled in Web services vulnerability in Micro Focus...

Login filter can access configuration files vulnerability in Micro Focus...

There is an improper restriction of rendered UI layers or...

Affected Vendor

Micro Focus International

View all reports →

Affected Software

Open Enterprise Server

Vulnerable Versions:

All

Timeline

Official Publish: January 23rd, 2017

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.