CVE-2020-11858

Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.

Description

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.

Remediation

Solution:

For Operation Bridge Manager https://softwaresupport.softwaregrp.com/doc/KM03747658 For Operation Bridge (containerized) https://softwaresupport.softwaregrp.com/doc/KM03747854

7.8

CVSS

Severity: High

CVSS 3.1 •

CVSS 2.0 •

EPSS 4.03% Top 15%

Affected: Micro Focus Operation Bridge (containerized)

Affected: Micro Focus Operation Bridge Manager

References

Link	Tags
https://softwaresupport.softwaregrp.com/doc/KM03747658
https://softwaresupport.softwaregrp.com/doc/KM03747854
https://www.zerodayinitiative.com/advisories/ZDI-20-1326/
http://packetstormsecurity.com/files/161411/Micro-Focus-Operations-Bridge-Manager-Local-Privilege-Escalation.html

Frequently Asked Questions

What is the severity of CVE-2020-11858?: CVE-2020-11858 has been scored as a high severity vulnerability.
How to fix CVE-2020-11858?: To fix CVE-2020-11858: For Operation Bridge Manager https://softwaresupport.softwaregrp.com/doc/KM03747658 For Operation Bridge (containerized) https://softwaresupport.softwaregrp.com/doc/KM03747854
Is CVE-2020-11858 being actively exploited in the wild?: It is possible that CVE-2020-11858 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2020-11858?: CVE-2020-11858 affects Micro Focus Operation Bridge (containerized), Micro Focus Operation Bridge Manager.