{"affected":[{"affectedData":[{"product":"Filr","vendor":"Micro Focus","versions":[{"lessThan":"3.0 Security Update 6","status":"affected","version":"3","versionType":"custom"}]}],"source":"security@opentext.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microfocus:filr:3.0:-:*:*:*:*:*:*","matchCriteriaId":"58764C6E-A22A-4732-8707-4D2E9F7112F4","vulnerable":true},{"criteria":"cpe:2.3:a:microfocus:filr:3.0:update_1:*:*:*:*:*:*","matchCriteriaId":"4890BAB5-1505-4FC3-92B5-EB08FDE93DC7","vulnerable":true},{"criteria":"cpe:2.3:a:microfocus:filr:3.0:update_2:*:*:*:*:*:*","matchCriteriaId":"F8437EBB-AAC3-4E10-BD30-7E41FED762A6","vulnerable":true},{"criteria":"cpe:2.3:a:microfocus:filr:3.0:update_3:*:*:*:*:*:*","matchCriteriaId":"7F05D20C-3CEA-4A9A-AC7E-7233BA58E624","vulnerable":true},{"criteria":"cpe:2.3:a:microfocus:filr:3.0:update_4:*:*:*:*:*:*","matchCriteriaId":"B842ABF3-85AE-4369-9997-F3A5982F9F6C","vulnerable":true},{"criteria":"cpe:2.3:a:microfocus:filr:3.0:update_5:*:*:*:*:*:*","matchCriteriaId":"6BD7B9AE-7249-44B5-9A99-E2EC85E4A723","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:suse:suse_linux_enterprise_server:11:*:*:*:*:*:*:*","matchCriteriaId":"93AD897C-C9F7-4B4D-BC39-5E13920383D4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A local privilege escalation vulnerability in the famtd component of Micro Focus Filr 3.0 allows a local attacker authenticated as a low privilege user to escalate to root. This vulnerability affects all versions of Filr 3.x prior to Security Update 6."},{"lang":"es","value":"Una vulnerabilidad de escalado de privilegios local en el componente famtd de Micro Focus Filr 3.0 permite que un atacante local autenticado como usuario con bajos privilegios escale a root. Esta vulnerabilidad afecta a todas las versiones 3.x de Filr anteriores al Security Update 6."}],"id":"CVE-2019-3475","lastModified":"2026-06-17T02:35:10.713","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"security@opentext.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-02-20T22:29:00.337","references":[{"source":"security@opentext.com","url":"https://download.novell.com/Download?buildid=nZUCSDkvpxk~"},{"source":"security@opentext.com","url":"https://support.microfocus.com/kb/doc.php?id=7023727"},{"source":"security@opentext.com","url":"https://www.exploit-db.com/exploits/46450/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://download.novell.com/Download?buildid=nZUCSDkvpxk~"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://support.microfocus.com/kb/doc.php?id=7023727"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.exploit-db.com/exploits/46450/"}],"sourceIdentifier":"security@opentext.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-264"}],"source":"security@opentext.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-269"}],"source":"nvd@nist.gov","type":"Primary"}]}