CVE-2020-11855

EPSS 1.3%

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

22 sep 2020Publicada en NVD

28 oct 2020Exploit Metasploit disponible

Velocidad de armamento

35 díashasta el módulo Metasploit

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges.

Productos afectados

n/a · Operation Bridge Reporter.

Referencias

https://softwaresupport.softwaregrp.com/doc/KM03710590 https://www.zerodayinitiative.com/advisories/ZDI-20-1217/