CVE:CVE-2020-11853
CNNVD:CNNVD-202010-1257
Micro Focus Operation Bridge Manager是英国Micro Focus公司的一款企业级监控软件。该软件通过HTML5来可视化总结服务运行状况。
Micro Focus Operation Bridge Manager 多版本存在代码注入漏洞。该漏洞可能允许远程攻击者执行任意代码。受影响版本如下：2020.05、2019.11、2019.05、2018.11、2018.05、10.6x和10.1x及之前版本。
solution:Upgrade microfocus operation_bridge_manager to a higher version than 10.10,10.11,10.12,10.60,10.61,10.62,10.63,and avoid the version (,10.10],10.11,10.12,10.60,10.61,10.62,10.63; Upgrade microfocus operations_bridge_manager to a higher version than 2017.11,2018.02,2018.05,2018.08,2018.11,2019.05,2019.08,2019.11,2020.05,and avoid the version 2017.11,2018.02,2018.05,2018.08,2018.11,2019.05,2019.08,2019.11,2020.05; Upgrade hp universal_cmbd_foundation to a higher version than 10.20,10.30,10.31,10.32,10.33,11.0,2018.05,2018.08,2018.11,2019.02,2019.05,2019.11,2020.05.,and avoid the version 10.20,10.30,10.31,10.32,10.33,11.0,2018.05,2018.08,2018.11,2019.02,2019.05,2019.11,2020.05.; Upgrade microfocus application_performance_management to a higher version than 9.40,9.50,9.51,and avoid the version 9.40,9.50,9.51; Upgrade microfocus data_center_automation to a higher version than 2019.11,and avoid the version (,2019.11]; Upgrade microfocus hybrid_cloud_management to a higher version than 2020.05,and avoid the version [2018.05,2020.05]; Upgrade microfocus service_manager_automation to a higher version than 2020.02,2020.05,and avoid the version 2020.02,2020.05