CVE-2020-11851 Code injection in ArcSight Logger
Remote attackers can execute arbitrary code on Micro Focus ArcSight Logger, requiring an upgrade to secure the system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11851?
CVE-2020-11851 is a critical code injection vulnerability in Micro Focus ArcSight Logger, published on 17 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code.
Weakness: CWE-94
Which versions are affected by CVE-2020-11851?
It affects 1 product.
Products include Microfocus Arcsight Logger.
How do I fix CVE-2020-11851?
No fix has been published for CVE-2020-11851 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2020-11851 being exploited?
There is no known exploitation of CVE-2020-11851 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Micro Focus ArcSight Logger
- CVE-2023-24470 XML external entity in ArcSight Logger
- CVE-2019-11657 Cross-site request forgery in ArcSight Logger
- CVE-2022-26330 Cross-site scripting in Micro Focus ArcSight Logger
- CVE-2023-24469 Cross-site scripting in ArcSight Logger
- CVE-2022-26331 Cross-site scripting in Micro Focus ArcSight Logger
Sources
Also known as GHSA-5xg8-q2v8-w6f8.