Skip to content
OpenAdvisories
Critical · 10.0 CVE-2020-11844 EUVD-2020-4184GHSA-99j9-w4cp-4529

Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

Published May 29, 2020 · Updated Aug 4, 2024 · Assigned by microfocus

Vendor: Micro Focus Product: ArcSight ESM (when ArcSight Fusion Product: ArcSight Interset Product: ArcSight Investigate. versions Product: ArcSight Transformation Hub Product: Data Center Automation Containerized Product: Hybrid Cloud Management Product: Identity Intelligence. versions Product: Network Operation Management Product: Operation Bridge Suite (Containerized) Product: Service Management Automation (SMA)

Description

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

Affected products

VendorProductAffectedFixed
Micro Focus Hybrid Cloud Management 2018.05 – < 2019.11 2019.11
Micro Focus ArcSight Investigate. versions 2.4.0, 3.0.0, 3.1.0 —
Micro Focus ArcSight Transformation Hub 3.0.0, 3.1.0, 3.2.0 —
Micro Focus ArcSight Interset 6.0.0 —
Micro Focus ArcSight ESM (when ArcSight Fusion 7.2.1 —
Micro Focus Service Management Automation (SMA) 2018.05, 2018.08, 2018.11, 2019.02, 2019.05, 2019.08, 2019.11, 2020.02 —
Micro Focus Operation Bridge Suite (Containerized) 2018.05, 2018.08, 2018.11, 2019.02, 2019.05, 2019.8, 2019.11 —
Micro Focus Network Operation Management 2017.11 – ≤ 2019.11 —
Micro Focus Data Center Automation Containerized 2018.05, 2018.08, 2018.11, 2019.02, 2019.05, 2019.08, 2019.11 —
Micro Focus Identity Intelligence. versions 1.1.0 —

References