CVEvulnerability
CVE-2020-11855
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-09-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-732
Description
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges.
Affected configurations
• microfocus operation bridge reporter (<= 10.40)
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://softwaresupport.softwaregrp.com/doc/KM03710590 softwaresupport.softwaregrp.com
- https://www.zerodayinitiative.com/advisories/ZDI-20-1217/ www.zerodayinitiative.com
- https://softwaresupport.softwaregrp.com/doc/KM03710590 softwaresupport.softwaregrp.com
- https://www.zerodayinitiative.com/advisories/ZDI-20-1217/ www.zerodayinitiative.com