Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-11803 State: PUBLISHED Published: 2020-09-17T16:24:01 Last Updated: 2024-08-04T11:41:59.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP code evaluation server-side, because the user-provided input is passed directly to the php eval() function. The user has to be authenticated on the web platform before interacting with the page. Additional Analyst Notes: - CVE Program Container: References: - https://www.spamtitan.com/ - https://github.com/felmoltor - https://twitter.com/felmoltor - https://sensepost.co
nces: - https://www.spamtitan.com/ - https://github.com/felmoltor - https://twitter.com/felmoltor - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html
CVE ID: CVE-2020-11804 State: PUBLISHED Published: 2020-09-17T16:26:45 Last Updated: 2024-08-04T11:42:00.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur. The input for this parameter is provided directly by an authenticated user via an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/felmoltor - https://twitter.com/felmoltor - https://www.spamtitan.com - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-7.07
m - https://sensepost.com/blog/2020/clash-of-the-spamtitan/ - http://packetstormsecurity.com/files/159218/SpamTitan-7.07-Remote-Code-Execution.html
CVE ID: CVE-2020-11805 State: PUBLISHED Published: 2020-09-25T03:31:46 Last Updated: 2024-08-04T11:41:59.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Reverse Proxy and TURN Server before 6.1.0 has Incorrect UDP Access Control via TURN. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2020-11806 State: PUBLISHED Published: 2020-04-23T12:42:51 Last Updated: 2024-08-04T11:41:59.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MailStore Outlook Add-in (and Email Archive Outlook Add-in) through 12.1.2, the login process does not validate the validity of the certificate presented by the server. Additional Analyst Notes: - CVE Program Container: References: - https://help.mailstore.com/security/MAILSTORE-SA-2020-01.txt
CVE ID: CVE-2020-11807 State: PUBLISHED Published: 2020-05-19T16:00:50 Last Updated: 2024-08-04T11:42:00.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and sometimes terminal commands) on a server by making an avatar update and then visiting the avatar file under the /images/ path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sourcefabric/Newscoop/blob/3df835637609a5a42530b2a4611177c634ad6274/newscoop/library/Newscoop/Image/ImageService.php#L226 - https://gist.github.com/V-Rico/82e9e52ac
530b2a4611177c634ad6274/newscoop/library/Newscoop/Image/ImageService.php#L226 - https://gist.github.com/V-Rico/82e9e52ac451dc20eef87b0999b3b1ee
CVE ID: CVE-2020-11810 State: PUBLISHED Published: 2020-04-27T14:47:01 Last Updated: 2024-08-04T11:42:00.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Ne
ictim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OpenVPN/openvpn/commit/37bc691e7d26ea4eb61a8a434ebd7a9ae76225ab - https://security-tracker.debian.org/tracker/CVE-2020-11810 - https://bugzilla.suse.com/show_bug.cgi?id=1169925 - https://community.openvpn.net/openvpn/ticket/1272 - https://patchwork.openvpn.net/patch/1079/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGHHV4YZANZW45KZTJJGVGPFMSXYRCKZ/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/FGHHV4YZANZW45KZTJJGVGPFMSXYRCKZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JII7RYYYRBPQNEGGVSOXCM7JUZ43T3VH/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html
CVE ID: CVE-2020-11811 State: PUBLISHED Published: 2020-04-16T16:24:11 Last Updated: 2024-08-04T11:42:00.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbitrary command on the server using this malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/qdpm-web-based-project-management.html
CVE ID: CVE-2020-11812 State: PUBLISHED Published: 2020-04-16T16:37:14 Last Updated: 2024-08-04T11:42:00.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-filters0value.html - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-filters1value.html
CVE ID: CVE-2020-11813 State: PUBLISHED Published: 2020-04-16T16:30:41 Last Updated: 2024-08-04T11:41:59.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the copyright text input. Thus, an attacker can inject a malicious script to steal all users' valuable data. This copyright text is on every page so this attack vector can be very dangerous. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-stored-xss.html
CVE ID: CVE-2020-11814 State: PUBLISHED Published: 2020-04-16T16:43:30 Last Updated: 2024-08-04T11:42:00.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/qdpm-web-based-project-management_11.html
CVE ID: CVE-2020-11815 State: PUBLISHED Published: 2020-04-16T16:57:06 Last Updated: 2024-08-04T11:41:59.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs without the Maintenance Mode setting. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-rce.html
CVE ID: CVE-2020-11816 State: PUBLISHED Published: 2020-04-16T16:50:37 Last Updated: 2024-08-04T11:42:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the reports_id (POST) parameter. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-reportsid-post.html
CVE ID: CVE-2020-11817 State: PUBLISHED Published: 2020-04-27T14:14:34 Last Updated: 2024-08-04T11:42:00.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs with the Maintenance Mode setting. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-maintenance-mode.html
CVE ID: CVE-2020-11818 State: PUBLISHED Published: 2020-04-16T17:07:52 Last Updated: 2024-08-04T11:41:59.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection mechanism can be bypassed with another user's valid token. Thus, an attacker can change the Admin password by using a CSRF attack and escalate his/her privileges. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-csrf-bypass-privilege.html
CVE ID: CVE-2020-11819 State: PUBLISHED Published: 2020-04-16T17:42:34 Last Updated: 2024-08-04T11:42:00.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-rce-via.html
CVE ID: CVE-2020-11820 State: PUBLISHED Published: 2020-04-16T17:35:50 Last Updated: 2024-08-04T11:42:00.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entities_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-sql-injection-entitiesid.html
CVE ID: CVE-2020-11821 State: PUBLISHED Published: 2020-04-27T14:19:16 Last Updated: 2024-08-04T11:42:00.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-password-hash-in-cookie-url.html
CVE ID: CVE-2020-11822 State: PUBLISHED Published: 2020-04-27T14:24:18 Last Updated: 2024-08-04T11:42:00.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus, an attacker can inject malicious script to steal all users' valuable data. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/01/rukovoditel-stored-xss-via-group-name.html
CVE ID: CVE-2020-11823 State: PUBLISHED Published: 2020-04-16T18:36:24 Last Updated: 2024-08-04T11:42:00.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit page. This may lead to stealing of the admin account. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/04/dolibarr-stored-xss.html
CVE ID: CVE-2020-11825 State: PUBLISHED Published: 2020-04-16T19:03:47 Last Updated: 2024-08-04T11:41:59.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/04/dolibarr-csrf.html
CVE ID: CVE-2020-11826 State: PUBLISHED Published: 2020-04-16T18:48:36 Last Updated: 2024-08-04T11:42:00.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Users can lock their notes with a password in Memono version 3.8. Thus, users needs to know a password to read notes. However, these notes are stored in a database without encryption and an attacker can read the password-protected notes without having the password. Notes are stored in the ZENTITY table in the memono.sqlite database. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.blogspot.com/2020/02/memono-insecure-data-storage-ios.html
CVE ID: CVE-2020-11827 State: PUBLISHED Published: 2020-07-14T17:06:19 Last Updated: 2024-08-04T11:41:59.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a Trojan horse GalaxyClientService.exe. After that, the attacker can re-start this service as an unprivileged user to escalate his/her privileges and run commands on the machine with SYSTEM rights. Additional Analyst Notes: - CVE Program Container: References: - https://www.gog.com/galaxy - https://fatihhcelik.blogspot.com/2020/04/gog-galaxy-desktop-app-local-privilege.ht
ences: - https://www.gog.com/galaxy - https://fatihhcelik.blogspot.com/2020/04/gog-galaxy-desktop-app-local-privilege.html
CVE ID: CVE-2020-11828 State: PUBLISHED Published: 2020-04-21T13:42:04 Last Updated: 2024-08-04T11:42:00.696Z Vendors: Oppo Products: Color OS Problem Types: n/a Description: In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the screenShot function to RGB value assignment, will not initialize the value is returned to the attackers, leading to values on the stack information leakage, the vulnerability can be used to bypass attackers ALSR. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/cn/noticedetails.html?n
ALSR. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/cn/noticedetails.html?noticeId=20201587348300033
CVE ID: CVE-2020-11829 State: PUBLISHED Published: 2020-11-19T15:51:07 Last Updated: 2024-08-04T11:42:00.232Z Vendors: n/a Products: com.coloros.codebook Problem Types: privilege escalation Description: Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0_5493e40_200722. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1328876061836189696
CVE ID: CVE-2020-11830 State: PUBLISHED Published: 2020-11-19T15:51:09 Last Updated: 2024-08-04T11:42:00.625Z Vendors: n/a Products: com.oppo.qualityprotect Problem Types: privilege escalation Description: QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1328876061836189696
CVE ID: CVE-2020-11831 State: PUBLISHED Published: 2020-11-19T15:51:12 Last Updated: 2024-08-04T11:41:59.916Z Vendors: n/a Products: com.oppo.ovoicemanager Problem Types: privilege escalation Description: OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1328876061836189696
CVE ID: CVE-2020-11832 State: PUBLISHED Published: 2020-12-31T17:58:58 Last Updated: 2024-08-04T11:42:00.647Z Vendors: n/a Products: OPPO Find X2 Problem Types: DOS Overflow Description: In functions charging_limit_current_write and charging_limit_time_write in /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_charger.c have not checked the parameters, which causes a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1333235676610830336
CVE ID: CVE-2020-11833 State: PUBLISHED Published: 2020-12-31T17:59:22 Last Updated: 2024-08-04T11:42:00.763Z Vendors: n/a Products: OPPO Find X2 Problem Types: DOS Overflow Description: In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_mp2650.c, the function mp2650_data_log_write in mp2650_data_log_write does not check the parameter len which causes a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1333235676610830336
CVE ID: CVE-2020-11834 State: PUBLISHED Published: 2020-12-31T17:59:35 Last Updated: 2024-08-04T11:42:00.718Z Vendors: n/a Products: OPPO Find X2 Problem Types: DOS Overflow Description: In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/oppo_vooc.c, the function proc_fastchg_fw_update_write in proc_fastchg_fw_update_write does not check the parameter len, resulting in a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1333235676610830336
CVE ID: CVE-2020-11835 State: PUBLISHED Published: 2020-12-31T17:59:45 Last Updated: 2024-08-04T11:42:00.552Z Vendors: n/a Products: OPPO Find X2 Problem Types: DOS Description: In /SM8250_Q_Master/android/vendor/oppo_charger/oppo/charger_ic/oppo_da9313.c, failure to check the parameter buf in the function proc_work_mode_write in proc_work_mode_write causes a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticedetails.html?noticeId=NOTICE-1333235676610830336
CVE ID: CVE-2020-11836 State: PUBLISHED Published: 2021-02-05T23:38:24 Last Updated: 2024-08-04T11:42:00.634Z Vendors: n/a Products: OPPO Android Phone with MTK chipset Problem Types: Information Leak Description: OPPO Android Phone with MTK chipset and Android 8.1/9/10/11 versions have an information leak vulnerability. The “adb shell getprop ro.vendor.aee.enforcing” or “adb shell getprop ro.vendor.aee.enforcing” return no. Additional Analyst Notes: - CVE Program Container: References: - https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1357213888449617920
CVE ID: CVE-2020-11838 State: PUBLISHED Published: 2020-06-16T13:13:58 Last Updated: 2024-08-04T11:42:00.651Z Vendors: n/a Products: ArcSight Management Center. Problem Types: Cross Site Scripting. Description: Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03650893
CVE ID: CVE-2020-11839 State: PUBLISHED Published: 2020-06-12T22:30:38 Last Updated: 2024-08-04T11:42:00.162Z Vendors: n/a Products: ArcSight Logger. Problem Types: Cross Site Scripting Description: Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Logger product, affecting all version from 6.6.1 up to version 7.0.1. The vulnerabilities could be remotely exploited resulting in Cross-Site Scripting (XSS) or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03650887
CVE ID: CVE-2020-11840 State: PUBLISHED Published: 2020-06-16T13:11:49 Last Updated: 2024-08-04T11:42:00.506Z Vendors: n/a Products: ArcSight Management Center. Problem Types: Unauthorized information disclosure. Description: Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03650893
CVE ID: CVE-2020-11841 State: PUBLISHED Published: 2020-06-16T13:16:31 Last Updated: 2024-08-04T11:41:59.910Z Vendors: n/a Products: ArcSight Management Center. Problem Types: Unauthorized information disclosure. Description: Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://softwaresupport.softwaregrp.com/doc/KM03650893
CVE ID: CVE-2020-11842 State: PUBLISHED Published: 2020-05-04T12:31:13 Last Updated: 2024-08-04T11:42:00.557Z Vendors: n/a Products: Verastream Host Integrator (VHI) Problem Types: Information disclosure vulnerability Description: Information disclosure vulnerability in Micro Focus Verastream Host Integrator (VHI) product, affecting versions earlier than 7.8 Update 1 (7.8.49 or 7.8.0.49). The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view. Additional Analyst Notes: - CVE Program Container: References: - https://support.microfocus.com/kb/doc.php?id=7024567
CVE ID: CVE-2020-11843 State: PUBLISHED Published: 2024-06-11T07:23:38.502Z Last Updated: 2024-08-04T11:42:00.107Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: OpenText Products: NetIQ Access Manager Problem Types: CWE-200 Description: This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.netiq.com/documentation/access-manager-45/accessmanager452-hf1-release-notes/data/accessmanager452-hf1-release-notes.html - https://www.netiq.com/documentation/access-manager-44/accessmanager444-hf
data/accessmanager452-hf1-release-notes.html - https://www.netiq.com/documentation/access-manager-44/accessmanager444-hf3-release-notes/data/accessmanager444-hf3-release-notes.html
CVE ID: CVE-2020-11844 State: PUBLISHED Published: 2020-05-29T21:15:23 Last Updated: 2024-08-04T11:42:00.664Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Micro Focus Products: Hybrid Cloud Management, ArcSight Investigate. versions, ArcSight Transformation Hub, ArcSight Interset, ArcSight ESM (when ArcSight Fusion, Service Management Automation (SMA), Operation Bridge Suite (Containerized), Network Operation Management, Data Center Automation Containerized, Identity Intelligence. versions Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Man
uthorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1.