Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 2.0%
exploitation probability
2.0%top 21% of all CVEs
observed exploitation
nono source reports it
Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Micro Focus · ArcSight ESM (when ArcSight FusionMicro Focus · ArcSight IntersetMicro Focus · ArcSight Investigate. versionsMicro Focus · ArcSight Transformation HubMicro Focus · Data Center Automation ContainerizedMicro Focus · Hybrid Cloud ManagementMicro Focus · Identity Intelligence. versionsMicro Focus · Network Operation ManagementMicro Focus · Operation Bridge Suite (Containerized)Micro Focus · Service Management Automation (SMA)References
https://softwaresupport.softwaregrp.com/doc/KM03645628https://softwaresupport.softwaregrp.com/doc/KM03645629https://softwaresupport.softwaregrp.com/doc/KM03645630https://softwaresupport.softwaregrp.com/doc/KM03645631https://softwaresupport.softwaregrp.com/doc/KM03645636https://softwaresupport.softwaregrp.com/doc/KM03645642https://support.microfocus.com/kb/doc.php?id=7024637