Riskcovery

CVE-2020-11844

Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

State
Published
Severity
10.0 Critical
Published
May 29, 2020
Updated
Aug 4, 2024
Reserved
Apr 16, 2020

Read the record on cve.org

Description

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

Scores

CVSSScoreVectorSource
3.110.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hmicrofocus

Weaknesses

Affected Products

ProductVersions
Hybrid Cloud ManagementMicro Focus
  • 2018.05 to before 2019.11Affected
ArcSight Investigate. versionsMicro Focus
  • 2.4.0Affected
  • 3.0.0Affected
  • 3.1.0Affected
ArcSight Transformation HubMicro Focus
  • 3.0.0Affected
  • 3.1.0Affected
  • 3.2.0Affected
ArcSight IntersetMicro Focus
  • 6.0.0Affected
ArcSight ESM (when ArcSight FusionMicro Focus
  • 7.2.1Affected
Service Management Automation (SMA)Micro Focus
  • 2018.05Affected
  • 2018.08Affected
  • 2018.11Affected
  • 2019.02Affected
  • 2019.05Affected
  • 2019.08Affected
  • 2019.11Affected
  • 2020.02Affected
Operation Bridge Suite (Containerized)Micro Focus
  • 2018.05Affected
  • 2018.08Affected
  • 2018.11Affected
  • 2019.02Affected
  • 2019.05Affected
  • 2019.8Affected
  • 2019.11Affected
Network Operation ManagementMicro Focus
  • 2017.11 through 2019.11Affected
Data Center Automation ContainerizedMicro Focus
  • 2018.05Affected
  • 2018.08Affected
  • 2018.11Affected
  • 2019.02Affected
  • 2019.05Affected
  • 2019.08Affected
  • 2019.11Affected
Identity Intelligence. versionsMicro Focus
  • 1.1.0Affected
  • next of 1.1.1 to before unspecifiedNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.