CVE-2020-11854

microfocus application performance management, microfocus operations bridge, microfocus operations bridge manager

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-11854

Katalog CVE

CVSS 9.8 · Critical EPSS 74,4%

Kerentanan Use of Hard-coded Credentials pada microfocus application performance management, microfocus operations bridge +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.

Rincian

Terbit di NVD
27 Oktober 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-798: Use of Hard-coded Credentials
EPSS (30 hari)
74,4% peluang dieksploitasi; lebih tinggi dari 99,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
microfocus application performance management Versi 9.50
microfocus application performance management Versi 9.51
microfocus operations bridge Versi 2017.11
microfocus operations bridge Versi 2018.02
microfocus operations bridge Versi 2018.05
microfocus operations bridge Versi 2018.08
microfocus operations bridge Versi 2018.11
microfocus operations bridge Versi 2019.05
microfocus operations bridge Versi 2019.08
microfocus operations bridge Versi 2020.05
microfocus operations bridge manager Semua versi hingga 10.10
microfocus operations bridge manager Versi 10.11
microfocus operations bridge manager Versi 10.12
microfocus operations bridge manager Versi 10.60
microfocus operations bridge manager Versi 10.61
microfocus operations bridge manager Versi 10.62
microfocus operations bridge manager Versi 10.63
microfocus operations bridge manager Versi 2018.05
microfocus operations bridge manager Versi 2018.11
microfocus operations bridge manager Versi 2019.05
microfocus operations bridge manager Versi 2019.11
microfocus operations bridge manager Versi 2020.05
microfocus application performance management Versi 9.40

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.