CVE-2020-11853: Arbitrary code execution vulnerability on multiple Micro Focus products

Description

Arbitrary code execution vulnerability affecting multiple Micro Focus products. 1.) Operation Bridge Manager affecting version: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x and 10.1x and older versions. 2.) Application Performance Management affecting versions : 9.51, 9.50 and 9.40 with uCMDB 10.33 CUP 3 3.) Data Center Automation affected version 2019.11 4.) Operations Bridge (containerized) affecting versions: 2019.11, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05, 2018.02, 2017.11 5.) Universal CMDB affecting version: 2020.05, 2019.11, 2019.05, 2019.02, 2018.11, 2018.08, 2018.05, 11, 10.33, 10.32, 10.31, 10.30 6.) Hybrid Cloud Management affecting version 2020.05 7.) Service Management Automation affecting version 2020.5 and 2020.02. The vulnerability could allow to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus Operation Bridge Manager

2020.5affected
2019.11affected
2019.05affected
2018.11affected
2018.05affected
unspecified to ≤ 10.63affected

Micro Focus Application Performance Management

9.51affected
9.50affected
9.40affected

Micro Focus Data Center Automation

2019.11affected

Micro Focus Operations Bridge (containerized)

2019.11affected
2019.08affected
2019.05affected
2018.11affected
2018.08affected
2018.05affected
2018.02affected
2017.11affected

Micro Focus Universal CMDB

2020.05affected
2019.11affected
2019.05affected
2019.02affected
2018.11affected
2018.08affected
2018.05affected
11.0affected
10.33affected
10.32affected
10.31affected
10.30affected

CVE-2020-11853

Arbitrary code execution vulnerability on multiple Micro Focus products