CVE-2020-11858 Privilege escalation in Operation Bridge (containerized)
Local attackers can execute code with escalated privileges in Micro Focus Operations Bridge Manager and containerized products.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-11858?
CVE-2020-11858 is a high-severity vulnerability in Micro Focus Operation Bridge (containerized), published on 27 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.
Which versions are affected by CVE-2020-11858?
It affects 2 products.
Products include Microfocus Operations Bridge, Microfocus Operations Bridge Manager.
How do I fix CVE-2020-11858?
No fix has been published for CVE-2020-11858 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-11858 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-11858 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in Micro Focus Operation Bridge (containerized)
Sources
Also known as GHSA-54r5-wg44-vhhq.