CVE-2018-18590 MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution

Critical 9.6 Published Updated

Attackers can exploit this vulnerability in Micro Focus Operations Bridge to disclose sensitive information and potentially execute remote code.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2018-18590?

CVE-2018-18590 is a critical vulnerability in Micro Focus Operation Bridge Containerized Suite, published on 7 Nov 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.

Weakness: CWE-200

Which versions are affected by CVE-2018-18590?

It affects 1 product.

Products include Microfocus Operations Bridge.

How do I fix CVE-2018-18590?

No fix has been published for CVE-2018-18590 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-18590 being exploited?

There is no known exploitation of CVE-2018-18590 in the wild and no public exploit code.

Sources

Also known as GHSA-38m3-4jxp-wf6g.

Is CVE-2018-18590 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free