SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-11861

Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11.

HIGH 7.8EPSS 0.35%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system.

CVSS 3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.35% probability · 28th percentile
CISA KEV
Not listed
Affected
microfocus/operations agent
Source
security@opentext.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.