Micro Focus Service Management Automation (SMA) 2018.08
Approved changes feed: RSS · Atom
cpe:2.3:a:microfocus:service_management_automation:2018.08:*:*:*:*:*:*:*
part: a version: 2018.08 update: *
| Vendor | Microfocus (cc324dd9-9ad0-55dc-9b4f-9941987276c3) |
|---|---|
| Product | Service Management Automation (932d4377-3717-5d24-904e-bf06c483b52b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-11844 |
vulnerable | 2026-06-08 05:17:54.966470 |
Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products.
CRITICAL (10)
Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. - Service Management Automation (SMA). versions 2018.05 to 2020.02 - Operation Bridge Suite (Containerized). Versions 2018.05 to 2020.02. - Network Operation Management. versions 2017.11 to 2019.11. - Data Center Automation Containerized. versions 2018.05 to 2019.11 - Identity Intelligence. versions 1.1.0 and 1.1.1. The vulnerability could be exploited to provide unauthorized access to the Container Deployment Foundation.
Published: 2020-05-29T21:15:23.000Z
Updated: 2024-08-04T11:42:00.664Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5736 |
vulnerable | 2026-06-08 05:14:08.034879 |
Details available
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.
Published: 2019-02-11T00:00:00.000Z
Updated: 2024-08-04T20:01:52.208Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.