CVE-2019-3474

Publication date

2019-02-20 22:00:00

Family

microfocus

State

PUBLISHED

Description

A path traversal vulnerability in the web application component of Micro Focus Filr 3.x allows a remote attacker authenticated as a low privilege user to download arbitrary files from the Filr server. This vulnerability affects all versions of Filr 3.x prior to Security Update 6.