13132 matches found
CVE-2020-11857
CVE-2020-11857 affects Micro Focus Operations Bridge Reporter up to v10.40, with an authorization bypass (and, per ZDI, a hard-coded shrboadmin password) enabling remote access to the OBR host and, in the cited advisory, remote code execution. Affected versions are 10.40 and earlier; no explicit ...
CVE-2020-11855
CVE-2020-11855 is a local authorization-bypass vulnerability in Micro Focus Operations Bridge Reporter (OBR) and affected OBM/OBR components up to version 10.40 and earlier. The root cause is incorrect permissions/authorization handling, enabling a local attacker on the OBR host to execute code w...
CVE-2020-11855
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges...
PT-2020-12899
Name of the Vulnerable Software and Affected Versions Micro Focus Operation Bridge Reporter versions 10.40 and earlier Description The issue is related to an Authorization Bypass, which could allow remote attackers to access the OBR host as a non-admin user. Additionally, there is a mention of a...
CVE-2020-11856: Missing Authentication for Critical Function
Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of OBR...
PT-2020-12898
Name of the Vulnerable Software and Affected Versions Micro Focus Operation Bridge Reporter versions 10.40 and earlier Description The issue is related to arbitrary code execution, which could allow remote attackers to execute arbitrary code on affected installations. This is due to a missing...
CVE-2020-11857: Use of Hard-coded Credentials
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user...
CVE-2020-11855: Incorrect Permission Assignment for Critical Resource
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges...
Trend Micro Vulnerability Protection Authentication Bypass
The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...
Trend Micro Vulnerability Protection Authentication Bypass
The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...
PT-2020-12897
Name of the Vulnerable Software and Affected Versions Micro Focus Operation Bridge Reporter versions 10.40 and earlier Description The issue is related to an Authorization Bypass, which could allow local attackers on the host to execute code with escalated privileges. This is due to an incorrect...
Micro Focus Operations Bridge Reporter shrboadmin default password
This module abuses a known default password on Micro Focus Operations Bridge Reporter. The 'shrboadmin' user, installed by default by the product has the password of 'shrboadmin', and allows an attacker to login to the server via SSH. This module has been tested with Micro Focus Operations Bridge...
Cloud Misconfiguration Causes Breaches—How to Avoid it
Better understand the challenges surrounding misconfigurations and learn how Trend Micro Cloud One™ – Conformity can provide automated guardrails to help you build a better cloud architecture...
CVE-2020-11861
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
Design/Logic Flaw
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
CVE-2020-11861
CVE-2020-11861 affects Micro Focus Operation Agent, with all versions prior to 12.11 vulnerable to local privilege escalation. The issue enables an attacker with local access to escalate privileges to root. Remediation: upgrade to version 12.11 or later. No explicit exploit details are provided i...
CVE-2020-11861
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
This Week in Security News: AWS Outposts Ready Launches With 32 Validated Partners and Staples Hit by a Data Breach
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how solutions from 32 Amazon Web Services partners – including Trend Micro – are now available for AWS customers to use with the...
PT-2020-12902
Name of the Vulnerable Software and Affected Versions Micro Focus Operation Agent versions prior to 12.11 Description The issue allows for unauthorized escalation of local privileges, potentially enabling an attacker to gain root access on the system. Recommendations For versions prior to 12.11,...