CyberSec.Space Logo
Back to CVE Browser

CVE-2020-11844

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1550%
EPSS Percentile8.47th
PublishedMay 29, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

Affected Platforms (CPE)

πŸ“¦
Microfocus

Service Management Automation

= 2018.05
πŸ“¦
Microfocus

Service Management Automation

= 2018.08
πŸ“¦
Microfocus

Service Management Automation

= 2018.11
πŸ“¦
Microfocus

Service Management Automation

= 2019.02
πŸ“¦
Microfocus

Service Management Automation

= 2019.05
πŸ“¦
Microfocus

Service Management Automation

= 2019.08
πŸ“¦
Microfocus

Service Management Automation

= 2019.11
πŸ“¦
Microfocus

Service Management Automation

= 2020.02

References & Advisories

Related Vulnerabilities