CVE-2018-6491: MFSBGN03803 rev.1 - UCMDB, Installation File Access Control Privilege Escalation Vulnerability

Security readout for executives and security teams

CVE-2018-6491 is a high-severity privilege escalation issue in Micro Focus Universal CMDB. Affected systems could let an unauthenticated network attacker escalate privileges locally, with high confidentiality, integrity, and availability impact. The provided sources do not confirm active exploitation. Organizations running Micro Focus Universal CMDB versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, or 11.00 are potentially exposed, especially where UCMDB services are reachable from broader internal or external networks. Treat this as a near-term remediation item for any active UCMDB deployment. The impact is high, but evidence is incomplete on exploitation and fixes, so prioritize confirmation against vendor guidance before emergency action. Mitigation focus: Check Micro Focus advisory KM03141180 for vendor-supported updates or remediation guidance.; Prioritize upgrade or remediation for affected Universal CMDB versions.; Restrict UCMDB access to trusted administrative networks only..

Prepared

May 23, 2026, 10:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.