CVE-2020-11853: Arbitrary code execution vulnerability on multiple Micro Focus products
First published: Thu Oct 22 2020(Updated: )
Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.
Credit: security@microfocus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus Operation Bridge Manager | <=10.10 | |
| Microfocus Operation Bridge Manager | =10.11 | |
| Microfocus Operation Bridge Manager | =10.12 | |
| Microfocus Operation Bridge Manager | =10.60 | |
| Microfocus Operation Bridge Manager | =10.61 | |
| Microfocus Operation Bridge Manager | =10.62 | |
| Microfocus Operation Bridge Manager | =10.63 | |
| Micro Focus Operations Bridge Manager | =2017.11 | |
| Micro Focus Operations Bridge Manager | =2018.02 | |
| Micro Focus Operations Bridge Manager | =2018.05 | |
| Micro Focus Operations Bridge Manager | =2018.08 | |
| Micro Focus Operations Bridge Manager | =2018.11 | |
| Micro Focus Operations Bridge Manager | =2019.05 | |
| Micro Focus Operations Bridge Manager | =2019.08 | |
| Micro Focus Operations Bridge Manager | =2019.11 | |
| Micro Focus Operations Bridge Manager | =2020.05 | |
| Hp Universal Cmbd Foundation | =10.20 | |
| Hp Universal Cmbd Foundation | =10.30 | |
| Hp Universal Cmbd Foundation | =10.31 | |
| Hp Universal Cmbd Foundation | =10.32 | |
| Hp Universal Cmbd Foundation | =10.33 | |
| Hp Universal Cmbd Foundation | =11.0 | |
| Hp Universal Cmbd Foundation | =2018.05 | |
| Hp Universal Cmbd Foundation | =2018.08 | |
| Hp Universal Cmbd Foundation | =2018.11 | |
| Hp Universal Cmbd Foundation | =2019.02 | |
| Hp Universal Cmbd Foundation | =2019.05 | |
| Hp Universal Cmbd Foundation | =2019.11 | |
| Hp Universal Cmbd Foundation | =2020.05. | |
| Microfocus Application Performance Management | =9.40 | |
| Microfocus Application Performance Management | =9.50 | |
| Microfocus Application Performance Management | =9.51 | |
| Microfocus Data Center Automation | <=2019.11 | |
| Microfocus Hybrid Cloud Management | >=2018.05<=2020.05 | |
| Microfocus Service Manager Automation | =2020.02 | |
| Microfocus Service Manager Automation | =2020.05 |
Remedy
For Operation Bridge Manager https://softwaresupport.softwaregrp.com/doc/KM03747658 For Application Performance Management https://softwaresupport.softwaregrp.com/doc/KM03747657 For Data Center Automation https://softwaresupport.softwaregrp.com/doc/KM03749879 For Operation Bridge (containerized) https://softwaresupport.softwaregrp.com/doc/KM03747854 For Hybrid Cloud Management https://softwaresupport.softwaregrp.com/doc/KM03747949 For Universal CMDB https://softwaresupport.softwaregrp.com/doc/KM03747948 For Service Management Automation https://softwaresupport.softwaregrp.com/doc/KM03747950
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/161366/Micro-Focus-Operations-Bridge-Manager-Remote-Code-Execution.html
- https://softwaresupport.softwaregrp.com/doc/KM03747657
- https://softwaresupport.softwaregrp.com/doc/KM03747658
- https://softwaresupport.softwaregrp.com/doc/KM03747854
- https://softwaresupport.softwaregrp.com/doc/KM03747948
- https://softwaresupport.softwaregrp.com/doc/KM03747949
- https://softwaresupport.softwaregrp.com/doc/KM03747950
- https://softwaresupport.softwaregrp.com/doc/KM03749879
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/title
- agent/remedy
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/source
- vendor/microfocus
- canonical/microfocus operation bridge manager
- version/microfocus operation bridge manager/10.10
- version/microfocus operation bridge manager/10.11
- version/microfocus operation bridge manager/10.12
- version/microfocus operation bridge manager/10.60
- version/microfocus operation bridge manager/10.61
- version/microfocus operation bridge manager/10.62
- version/microfocus operation bridge manager/10.63
- canonical/micro focus operations bridge manager
- version/micro focus operations bridge manager/2017.11
- version/micro focus operations bridge manager/2018.02
- version/micro focus operations bridge manager/2018.05
- version/micro focus operations bridge manager/2018.08
- version/micro focus operations bridge manager/2018.11
- version/micro focus operations bridge manager/2019.05
- version/micro focus operations bridge manager/2019.08
- version/micro focus operations bridge manager/2019.11
- version/micro focus operations bridge manager/2020.05
- vendor/hp
- canonical/hp universal cmbd foundation
- version/hp universal cmbd foundation/10.20
- version/hp universal cmbd foundation/10.30
- version/hp universal cmbd foundation/10.31
- version/hp universal cmbd foundation/10.32
- version/hp universal cmbd foundation/10.33
- version/hp universal cmbd foundation/11.0
- version/hp universal cmbd foundation/2018.05
- version/hp universal cmbd foundation/2018.08
- version/hp universal cmbd foundation/2018.11
- version/hp universal cmbd foundation/2019.02
- version/hp universal cmbd foundation/2019.05
- version/hp universal cmbd foundation/2019.11
- version/hp universal cmbd foundation/2020.05.
- canonical/microfocus application performance management
- version/microfocus application performance management/9.40
- version/microfocus application performance management/9.50
- version/microfocus application performance management/9.51
- canonical/microfocus data center automation
- version/microfocus data center automation/2019.11
- canonical/microfocus hybrid cloud management
- version/microfocus hybrid cloud management/2018.05
- version/microfocus hybrid cloud management/2020.05
- canonical/microfocus service manager automation
- version/microfocus service manager automation/2020.02
- version/microfocus service manager automation/2020.05