Към съдържанието
Търсене

CVE-2020-11844: Micro Focus Hybrid Cloud Management, заобикаляне на

10.0

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

    Описание

    Оригинално описание

    Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

    Засегнати продукти

    • Micro Focus Hybrid Cloud Management: 2018.05 преди 2019.11
    • Micro Focus ArcSight Investigate. versions: 2.4.0; 3.0.0; 3.1.0
    • Micro Focus ArcSight Transformation Hub: 3.0.0; 3.1.0; 3.2.0
    • Micro Focus ArcSight Interset: 6.0.0
    • Micro Focus ArcSight ESM (when ArcSight Fusion: 7.2.1
    • Micro Focus Service Management Automation (SMA): 2018.05; 2018.08; 2018.11; 2019.02; 2019.05; 2019.08; 2019.11; 2020.02
    • Micro Focus Operation Bridge Suite (Containerized): 2018.05; 2018.08; 2018.11; 2019.02; 2019.05; 2019.8; 2019.11
    • Micro Focus Network Operation Management: 2017.11 до 2019.11
    • Micro Focus Data Center Automation Containerized: 2018.05; 2018.08; 2018.11; 2019.02; 2019.05; 2019.08; 2019.11
    • Micro Focus Identity Intelligence. versions: 1.1.0; next of 1.1.1 преди unspecified

    Вид слабост

    История

    • 29 май 2020 Публикувано

    Други уязвимости в Micro Focus Hybrid Cloud Management

    Първоизточници