CVE-2020-11844

Katalog CVE

CVSS 9.8 · Critical EPSS 2,0%

Kerentanan Incorrect Authorization pada microfocus service management automation. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

Rincian

Terbit di NVD

29 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

2,0% peluang dieksploitasi; lebih tinggi dari 80,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://softwaresupport.softwaregrp.com/doc/KM03645628
• https://softwaresupport.softwaregrp.com/doc/KM03645629
• https://softwaresupport.softwaregrp.com/doc/KM03645630
• https://softwaresupport.softwaregrp.com/doc/KM03645631
• https://softwaresupport.softwaregrp.com/doc/KM03645636
• https://softwaresupport.softwaregrp.com/doc/KM03645642
• https://support.microfocus.com/kb/doc.php?id=7024637