Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0,
Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versions 2.4.0, 3.0.0 and 3.1.0. - ArcSight Transformation Hub. versions 3.0.0, 3.1.0, 3.2.0. - ArcSight Interset. version 6.0.0. - ArcSight ESM (when ArcSight Fusion 1.0 is installed). version 7.2.1. -…
| Vendor | Product | Versions |
|---|---|---|
| Micro Focus | Hybrid Cloud Management | 2018.05 |
| Micro Focus | ArcSight Investigate. versions | 2.4.0, 3.0.0, 3.1.0 |
| Micro Focus | ArcSight Transformation Hub | 3.0.0, 3.1.0, 3.2.0 |
| Micro Focus | ArcSight Interset | 6.0.0 |
| Micro Focus | ArcSight ESM (when ArcSight Fusion | 7.2.1 |
| Micro Focus | Service Management Automation (SMA) | 2018.05, 2018.08, 2018.11, 2019.02, 2019.05, 2019.08, 2019.11, 2020.02 |
| Micro Focus | Operation Bridge Suite (Containerized) | 2018.05, 2018.08, 2018.11, 2019.02, 2019.05, 2019.8, 2019.11 |
| Micro Focus | Network Operation Management | 2017.11 |
| Micro Focus | Data Center Automation Containerized | 2018.05, 2018.08, 2018.11, 2019.02, 2019.05, 2019.08, 2019.11 |
| Micro Focus | Identity Intelligence. versions | 1.1.0, next of 1.1.1 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.