CVE-2020-11858: Micro Focus Operations Bridge Manager Service Incorrect Permission Assignment Privilege Escalation Vulnerability
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Micro Focus Operations Bridge Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions set on the installation directory. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-11858.
What products are affected by this vulnerability?
Micro Focus Operations Bridge Manager and Operation Bridge (containerized) are affected by this vulnerability.
What is the severity of CVE-2020-11858?
CVE-2020-11858 has a severity level of high (7.8).
How can I exploit this vulnerability?
We do not provide information on how to exploit vulnerabilities. Please refer to official advisories and documentation for more information.
Is there a fix available for CVE-2020-11858?
Yes, patches and updates have been released to address the vulnerability. Please refer to the vendor's official advisories and documentation for the appropriate fixes.