HIGH🇵🇱 Wersja polska

CVE-2020-11858

CVSS 7.8v3.1pub. 2020-10-27upd. 2024-11-21

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microfocus Operations Bridge

    APP
    Microfocus
    2017.112018.022018.052018.082018.112019.052019.082020.05

  • Microfocus Operations Bridge Manager

    APP
    Microfocus
    10.1110.1210.6010.6110.6210.632018.052018.112019.052019.112020.05≤ 10.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEContainer
CWE
References

Related vulnerabilities

CVE-2021-38125CRITICAL9.8ten sam produkt

Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021....

CVE-2021-22507CRITICAL9.8ten sam produkt

Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11...

CVE-2021-22504CRITICAL9.8ten sam produkt

Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10...

CVE-2020-11854CRITICAL9.8ten sam produkt

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Oper...

CVE-2018-18590CRITICAL9.6ten sam produkt

A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Br...