Vulnerability Description
Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Operation Bridge Manager | <= 10.10 |
| Microfocus | Operations Bridge Manager | 2017.11 |
| Hp | Universal Cmbd Foundation | 10.20 |
| Microfocus | Application Performance Management | 9.40 |
| Microfocus | Data Center Automation | <= 2019.11 |
| Microfocus | Hybrid Cloud Management | >= 2018.05, <= 2020.05 |
| Microfocus | Service Manager Automation | 2020.02 |
References
- http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execut
- http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manage
- https://softwaresupport.softwaregrp.com/doc/KM03747657
- https://softwaresupport.softwaregrp.com/doc/KM03747658
- https://softwaresupport.softwaregrp.com/doc/KM03747854
- https://softwaresupport.softwaregrp.com/doc/KM03747948
- https://softwaresupport.softwaregrp.com/doc/KM03747949
- https://softwaresupport.softwaregrp.com/doc/KM03747950
- https://softwaresupport.softwaregrp.com/doc/KM03749879
- http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execut
- http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manage
- https://softwaresupport.softwaregrp.com/doc/KM03747657
- https://softwaresupport.softwaregrp.com/doc/KM03747658
- https://softwaresupport.softwaregrp.com/doc/KM03747854
- https://softwaresupport.softwaregrp.com/doc/KM03747948
FAQ
What is CVE-2020-11853?
CVE-2020-11853 is a vulnerability with a CVSS score of 8.8 (HIGH). Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x an...
How severe is CVE-2020-11853?
CVE-2020-11853 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-11853?
Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Operation Bridge Manager, Microfocus Operations Bridge Manager, Hp Universal Cmbd Foundation, Microfocus Application Performance Management, Microfocus Data Center Automation.