by Kastro
Paper/Archive/CVE-2020-11857

CVE-2020-11857

microfocus — An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

EPSS 16%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.9.969 × 2019.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user

Affected

ProductAffectedFixed inSource
Operation Bridge Reporter.10.40 and earlier.–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsoftwaresupport.softwaregrp.com/doc/KM03710590refzerodayinitiative.com/advisories/ZDI-20-1215refpacketstormsecurity.com/files/162407/Micro-Focus-Operations-Bridge-Reporter-shrboadmin-Default-Password.html