CVE-2020-11854: Micro Focus Operations Bridge Manager diagnostics Use of Hard-coded Credentials Remote Code Execution Vulnerability
Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the product's authentication mechanism. The product contains a hard-coded password for the diagnostics user account. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2020-11854.
What is the severity of vulnerability CVE-2020-11854?
The severity of vulnerability CVE-2020-11854 is critical with a severity value of 9.8.
Which products are affected by vulnerability CVE-2020-11854?
The products affected by vulnerability CVE-2020-11854 are Micro Focus Operations Bridge Manager, Micro Focus Application Performance Management, and Micro Focus Operations Bridge (containerized).
How can I fix vulnerability CVE-2020-11854?
To fix vulnerability CVE-2020-11854, it is recommended to apply the necessary security patches and updates provided by Micro Focus.
Where can I find more information about vulnerability CVE-2020-11854?
You can find more information about vulnerability CVE-2020-11854 in the references provided: [link1](http://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.html), [link2](https://softwaresupport.softwaregrp.com/doc/KM03747657), [link3](https://softwaresupport.softwaregrp.com/doc/KM03747658).