Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.

10 CVSS

Vulnerability Description

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11844

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Micro Focus

View All →

CVE-2023-32265

Mitigations and availability of updates relating to security vulnerability in ESCWA component CVE-2023-32265.

High 7.1

CVE-2023-32263

Dimensions CM Plugin for Jenkins 0.8.17 â€“ 0.9.3

Low 2.6

CVE-2023-32262

Dimensions CM Plugin for Jenkins 0.8.17 â€“ 0.9.3

Medium 4.3

CVE-2023-32261

Dimensions CM Plugin for Jenkins 0.8.17 â€“ 0.9.3

Medium 4.2

CVE-2022-38758

XSS vulnerabilities in iManager

High 7.2

Affected Vendor

Micro Focus

View all reports →

Affected Software

Hybrid Cloud Management, ArcSight Investigate. versions, ArcSight Transformation Hub, ArcSight Interset, ArcSight ESM (when ArcSight Fusion, Service Management Automation (SMA), Operation Bridge Suite (Containerized), Network Operation Management, Data Center Automation Containerized, Identity Intelligence. versions

Vulnerable Versions:

2018.05, 2.4.0, 3.0.0, 3.1.0, 3.2.0, 6.0.0, 7.2.1, 2018.08, 2018.11, 2019.02, 2019.05, 2019.08, 2019.11, 2020.02, 2019.8, 2017.11, 1.1.0, next of 1.1.1