CVEvulnerability

CVE-2020-11854

9.8 CRITICAL Published 2020-10-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-798

Description

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.

Affected configurations

• microfocus application performance management 9.50 • microfocus application performance management 9.51 • microfocus operations bridge 2017.11 • microfocus operations bridge 2018.02 • microfocus operations bridge 2018.05 • microfocus operations bridge 2018.08 • microfocus operations bridge 2018.11 • microfocus operations bridge 2019.05 • microfocus operations bridge 2019.08 • microfocus operations bridge 2020.05 • microfocus operations bridge manager (<= 10.10) • microfocus operations bridge manager 10.11 • microfocus operations bridge manager 10.12 • microfocus operations bridge manager 10.60 • microfocus operations bridge manager 10.61 • microfocus operations bridge manager 10.62 • microfocus operations bridge manager 10.63 • microfocus operations bridge manager 2018.05 • microfocus operations bridge manager 2018.11 • microfocus operations bridge manager 2019.05 • microfocus operations bridge manager 2019.11 • microfocus operations bridge manager 2020.05 • microfocus application performance management 9.40

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References