CVE-2020-11858

Description

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized). The vulneravility affects: 1.) Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) versions: 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. The vulnerability could allow local attackers to execute code with escalated privileges.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.754

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-11853,CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 2018.05	Windows
Vulnerabilities CVE-2020-11853,CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 2018.11	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2019.05	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2019.11	Windows
Multiple Vulnerabilities are affected in OpenText Operations Bridge Manager 2020.05	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.10	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.11	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.12	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.60	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.61	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.62	Windows
Vulnerabilities CVE-2020-11854,CVE-2020-11858,CVE-2021-22504 are affected in OpenText Operations Bridge Manager 10.63	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234