PT-2018-14533 · Micro Focus · Micro Focus Operations Bridge

Published 2018-11-07 · Updated 2019-10-09 · CVE-2018-18590

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08

Description A potential remote code execution and information disclosure issue exists. This could allow for information disclosure.

Recommendations For versions 2017.11, 2018.02, 2018.05, 2018.08, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-18590

Affected Products

Micro Focus Operations Bridge

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-18590 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18590 · Vendor Advisory
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03283416 · Note