high7.8
CVE-2020-11858
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized).
Impact
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microfocus | Operations Bridge | Versions 2017.11, 2018.02, 2018.05, 2018.08, 2018.11, 2019.05 |
| Microfocus | Operations Bridge Manager | through 10.10 Versions 10.11, 10.12, 10.60, 10.61, 10.62 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/161411/Micro-Focus-Operations-Bridge-Manager-Local-Privilege-Escalation.html
- https://softwaresupport.softwaregrp.com/doc/KM03747658
- https://softwaresupport.softwaregrp.com/doc/KM03747854
- https://www.zerodayinitiative.com/advisories/ZDI-20-1326/
- http://packetstormsecurity.com/files/161411/Micro-Focus-Operations-Bridge-Manager-Local-Privilege-Escalation.html
- https://softwaresupport.softwaregrp.com/doc/KM03747658
- https://softwaresupport.softwaregrp.com/doc/KM03747854
- https://www.zerodayinitiative.com/advisories/ZDI-20-1326/