Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2020-11844

Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microfocus

Description

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus Hybrid Cloud Management

  • 2018.05 to < 2019.11affected

Micro Focus ArcSight Investigate. versions

  • 2.4.0affected
  • 3.0.0affected
  • 3.1.0affected

Micro Focus ArcSight Transformation Hub

  • 3.0.0affected
  • 3.1.0affected
  • 3.2.0affected

Micro Focus ArcSight Interset

  • 6.0.0affected

Micro Focus ArcSight ESM (when ArcSight Fusion

  • 7.2.1affected

Micro Focus Service Management Automation (SMA)

  • 2018.05affected
  • 2018.08affected
  • 2018.11affected
  • 2019.02affected
  • 2019.05affected
  • 2019.08affected
  • 2019.11affected
  • 2020.02affected

Micro Focus Operation Bridge Suite (Containerized)

  • 2018.05affected
  • 2018.08affected
  • 2018.11affected
  • 2019.02affected
  • 2019.05affected
  • 2019.8affected
  • 2019.11affected

Micro Focus Network Operation Management

  • 2017.11 to ≤ 2019.11affected

Micro Focus Data Center Automation Containerized

  • 2018.05affected
  • 2018.08affected
  • 2018.11affected
  • 2019.02affected
  • 2019.05affected
  • 2019.08affected
  • 2019.11affected

Micro Focus Identity Intelligence. versions

  • 1.1.0affected
  • next of 1.1.1 to < unspecifiedunaffected

References