CVE-2020-11858

Опубликовано: 27 окт. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:operations_bridge:2017.11:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2018.02:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2018.05:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2018.08:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2018.11:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2019.05:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2019.08:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge:2020.05:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:*:*:*:*:*:*:*:*

Версия до 10.10 (включая)

cpe:2.3:a:microfocus:operations_bridge_manager:10.11:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:10.12:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:10.60:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:10.61:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:10.62:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:10.63:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:2018.05:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:2018.11:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:2019.05:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:2019.11:*:*:*:*:*:*:*

cpe:2.3:a:microfocus:operations_bridge_manager:2020.05:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01754

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-54r5-wg44-vhhq