CVE-2020-11853 : Security Advisory and Response

Arbitrary code execution vulnerability affecting multiple Micro Focus products.

Understanding CVE-2020-11853

Arbitrary code execution vulnerability impacting various Micro Focus products.

What is CVE-2020-11853?

This CVE involves an arbitrary code execution vulnerability that affects several Micro Focus products, potentially allowing attackers to execute malicious code.

The Impact of CVE-2020-11853

The vulnerability has a high severity level with a CVSS base score of 8.8. It can lead to high impacts on confidentiality, integrity, and availability of the affected systems.

Technical Details of CVE-2020-11853

Arbitrary code execution vulnerability details and affected systems.

Vulnerability Description

The vulnerability allows for arbitrary code execution, posing a significant security risk to the impacted Micro Focus products.

Affected Systems and Versions

Operation Bridge Manager: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, versions 10.6x, 10.1x, and older
Application Performance Management: 9.51, 9.50, 9.40
Data Center Automation: 2019.11
Operations Bridge (containerized): Multiple versions from 2017.11 to 2019.11
Universal CMDB: Multiple versions including 2020.05, 2019.11, 2018.05, and more
Hybrid Cloud Management: 2020.05
Service Management Automation: 2020.5, 2020.02

Exploitation Mechanism

The vulnerability can be exploited through arbitrary code execution, allowing attackers to run malicious code on the affected systems.

Mitigation and Prevention

Steps to mitigate and prevent the CVE-2020-11853 vulnerability.

Immediate Steps to Take

Apply the provided patches for each affected product promptly.
Monitor vendor updates and security advisories for further instructions.
Implement network security measures to detect and block potential exploitation attempts.

Long-Term Security Practices

Regularly update and patch all software and systems to prevent vulnerabilities.
Conduct security assessments and penetration testing to identify and address potential weaknesses.
Educate users and IT staff on security best practices and awareness.

Patching and Updates

Operation Bridge Manager: Link to Patch
Application Performance Management: Link to Patch
Data Center Automation: Link to Patch
Operations Bridge (containerized): Link to Patch
Hybrid Cloud Management: Link to Patch
Universal CMDB: Link to Patch
Service Management Automation: Link to Patch