CVE-2018-6490 MFSBGN03801 rev.1 - Micro Focus Operations Orchestration, Remote Denial of Service (DoS)

What is CVE-2018-6490?

CVE-2018-6490 is a medium-severity denial of service vulnerability in Micro Focus Operations Orchestration Software, published on 2 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service.

Weakness: CWE-20

Which versions are affected by CVE-2018-6490?

It affects 1 product.

Products include Hp Operations Orchestration.

How do I fix CVE-2018-6490?

No fix has been published for CVE-2018-6490 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2018-6490 being exploited?

There is no known exploitation of CVE-2018-6490 in the wild and no public exploit code.

Other vulnerabilities in Micro Focus Operations Orchestration Software

• CVE-2012-3258 Code injection in n/a Critical 10.0
• CVE-2016-8519 Deserialization in Operations Orchestration Critical 9.8
• CVE-2017-8994 Code injection in HPE Operations Orchestration Critical 9.8
• CVE-2016-1997 Deserialization in n/a Critical 9.8
• CVE-2015-2109 Auth bypass in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-55c5-rqrw-7hrr.