Vulnerability Details : CVE-2018-18590
A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.
Vulnerability category: Execute codeInformation leak
Products affected by CVE-2018-18590
- cpe:2.3:a:microfocus:operations_bridge:2017.11:*:*:*:premium:*:*:*
- cpe:2.3:a:microfocus:operations_bridge:2018.02:*:*:*:premium:*:*:*
- cpe:2.3:a:microfocus:operations_bridge:2018.05:*:*:*:premium:*:*:*
- cpe:2.3:a:microfocus:operations_bridge:2018.08:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-18590
0.38%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 73 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-18590
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.8
|
MEDIUM | AV:A/AC:L/Au:N/C:P/I:P/A:P |
6.5
|
6.4
|
NIST | |
9.6
|
CRITICAL | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
2.8
|
6.0
|
SUSE | |
8.8
|
HIGH | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2018-18590
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-18590
-
https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03283416
MySupport - Micro Focus Software SupportVendor Advisory
Jump to