PT-2020-12896

CVE-2020-11854

Published

2020-10-27

Updated

2022-04-26

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Operation Bridge Manager versions 2017.11 through 2020.05 Operations Bridge (containerized) versions 2017.11 through 2020.05 Application Performance Management versions 9.40 through 9.51

Description The issue affects Micro Focus products, including Operation Bridge Manager, Operations Bridge (containerized), and Application Performance Management. It could allow arbitrary code execution.

Recommendations For Operation Bridge Manager versions 2017.11 through 2020.05, update to a version later than 2020.05. For Operations Bridge (containerized) versions 2017.11 through 2020.05, update to a version later than 2020.05. For Application Performance Management versions 9.40 through 9.51, update to a version later than 9.51.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-798: Use of Hard-coded Credentials

Related identifiers

CVE-2020-11854

ZDI-20-1287