CVEvulnerability

CVE-2018-6499

9.8 CRITICAL Published 2018-08-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-08-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.1 HIGH — CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:H
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05, Service Virtualization (SV) with floating licenses using Any version using APLS older than 10.7, Unified Functional Testing (UFT) with floating licenses using Any version using APLS older than 10.7, Network Virtualization (NV) with floating licenses using Any version using APLS older than 10.7 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.

Affected configurations

• microfocus data center automation 2017.01 • microfocus data center automation 2017.05 • microfocus data center automation 2017.08 • microfocus data center automation 2017.09 • microfocus data center automation 2017.11 • microfocus data center automation 2018.02 • microfocus data center automation 2018.05 • microfocus hybrid cloud management 2017.11 • microfocus hybrid cloud management 2018.02 • microfocus hybrid cloud management 2018.05 • microfocus network operations management 2017.11 • microfocus network operations management 2018.02 • microfocus network operations management 2018.05 • microfocus operations bridge 2017.11 • microfocus operations bridge 2018.02 • microfocus operations bridge 2018.05 • microfocus service management automation 2017.11 • microfocus service management automation 2018.02 • microfocus service management automation 2018.05 • microfocus network virtualization 12.50 • microfocus service virtualization 1.00 • microfocus unified functional testing 12.50

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References