Към съдържанието
Търсене

CVE-2020-11853: Micro Focus Operation Bridge Manager

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.

    Описание

    Оригинално описание

    Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

    Засегнати продукти

    • Micro Focus Operation Bridge Manager: 2020.5; 2019.11; 2019.05; 2018.11; 2018.05; unspecified до 10.63
    • Micro Focus Application Performance Management: 9.51; 9.50; 9.40
    • Micro Focus Data Center Automation: 2019.11
    • Micro Focus Operations Bridge (containerized): 2019.11; 2019.08; 2019.05; 2018.11; 2018.08; 2018.05; 2018.02; 2017.11
    • Micro Focus Universal CMDB: 2020.05; 2019.11; 2019.05; 2019.02; 2018.11; 2018.08; 2018.05; 11.0; 10.33; 10.32; 10.31; 10.30
    • Micro Focus Hybrid Cloud Management: 2018.05 до 2020.05
    • Micro Focus Service Management Automation: 2020.05; 2020.02

    История

    • 22 октомври 2020 Публикувано

    Други уязвимости в Micro Focus Operation Bridge Manager

    Първоизточници

    CVE-2020-11853: Micro Focus Operation Bridge Manager | freedomonline.bg