CVE:CVE-2020-11854
CNNVD:CNNVD-202010-1533
Micro Focus Application Performance Management是英国Micro Focus公司的一款从基础设施到应用程序的全方位监控系统。
Micro Focus 多款产品存在信任管理问题漏洞，攻击者可利用该漏洞执行任意代码。以下产品及版本受到影响：Operation Bridge Manager  2020.05版本, 2019.11版本, 2019.05版本, 2018.11版本, 2018.05版本, 10.63版本,10.62版本, 10.61版本, 10.60版本, 10.12版本, 10.11版本, 10.10版本之前所有版本， Operations Bridge (containerized) 2020.05版本, 2019.08版本, 2019.05版本, 2018.11版本, 2018.08版本, 2018.05版本. 2018.02版本 和 2017.11. 3版本， Application Performance Management 9,51版本, 9.50版本， 9.40版本 uCMDB 10.33版本 CUP。
solution:Upgrade microfocus application_performance_management to a higher version than 9.50,9.51,9.40,and avoid the version 9.50,9.51,9.40; Upgrade microfocus operations_bridge to a higher version than 2017.11,2018.02,2018.05,2018.08,2018.11,2019.05,2019.08,2020.05,and avoid the version 2017.11,2018.02,2018.05,2018.08,2018.11,2019.05,2019.08,2020.05; Upgrade microfocus operations_bridge_manager to a higher version than 10.10,10.11,10.12,10.60,10.61,10.62,10.63,2018.05,2018.11,2019.05,2019.11,2020.05,and avoid the version (,10.10],10.11,10.12,10.60,10.61,10.62,10.63,2018.05,2018.11,2019.05,2019.11,2020.05