Arbitrary Code Execution Vulnerability in Micro Focus ArcSight Logger
CVE-2020-11851

9.8CRITICAL

Key Information:

Vendor

Micro Focus

Status
Arcsight Logger
Vendor
CVE Published:
17 November 2020

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2020-11851?

The vulnerability in Micro Focus ArcSight Logger allows an attacker to execute arbitrary code remotely, affecting all versions prior to 7.1.1. By sending specially crafted requests, unauthorized users can exploit this security issue, potentially leading to unauthorized access and further compromises within the system. It's crucial for users of affected versions to upgrade to at least 7.1.1 to mitigate this risk and enhance their overall security posture.

Affected Version(s)

ArcSight Logger All version prior to version 7.1.1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2020-11851
Created by ch1nghz

References

https://community.microfocus.com/t5/Logger/Logger-Release...
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.