PT-2018-14532 · Micro Focus · Micro Focus Real User Monitoring

Published 2018-10-23 · Updated 2020-08-24 · CVE-2018-18589

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Real User Monitoring versions 9.26IP, 9.30, 9.40, 9.50

Description A potential Remote Arbitrary Code Execution issue has been identified. This issue could be exploited to execute arbitrary code.

Recommendations For versions 9.26IP, 9.30, 9.40, 9.50, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2018-18589

Affected Products

Micro Focus Real User Monitoring

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-18589 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18589 · Vendor Advisory
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03272900 · Note