Vulnerability · Published Oct 27, 2020 · Assigned by microfocus
CVE-2020-11858Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.
High 7.8
In plain English
A high-severity security flaw in Operation Bridge (containerized) from Micro Focus. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.7% (higher than 86% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.
Official description
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Micro Focus | Operation Bridge (containerized) | 2020.052019.082019.052018.112018.082018.052018.022017.11 |
| Micro Focus | Operation Bridge Manager | 2020.052019.112019.052018.112018.0510.6310.6210.61 |
References
- https://softwaresupport.softwaregrp.com/doc/KM03747658 x_refsource_MISC
- https://softwaresupport.softwaregrp.com/doc/KM03747854 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-20-1326/ x_refsource_MISC
- http://packetstormsecurity.com/files/161411/Micro-Focus-Operations-Bridge-Manager-Local-Privilege-Escalation.html x_refsource_MISC