CVE-2018-6498 : Security Advisory and Response

A vulnerability has been identified that allows for remote code execution in certain Micro Focus products.

Understanding CVE-2018-6498

What is CVE-2018-6498?

CVE-2018-6498 is a vulnerability that enables remote code execution in various Micro Focus containerized suites.

The Impact of CVE-2018-6498

This vulnerability allows an attacker to execute code remotely, posing a significant security risk to affected systems.

Technical Details of CVE-2018-6498

Vulnerability Description

The vulnerability permits remote code execution in the following Micro Focus products:

Hybrid Cloud Management Containerized Suite (versions HCM2017.11, HCM2018.02, HCM2018.05)
Operations Bridge Containerized Suite (versions 2017.11, 2018.02, 2018.05)
Data Center Automation Containerized Suite (versions 2017.01 until 2018.05)
Service Management Automation Suite (versions 2017.11, 2018.02, 2018.05)
Network Operations Management (NOM) Suite CDF (versions 2017.11, 2018.02, 2018.05)

Affected Systems and Versions

The following Micro Focus products and versions are affected:

Network Operations Management (NOM) Suite CDF: 2017.11, 2018.02, 2018.05
Service Management Automation Suite: 2017.11, 2018.02, 2018.05
Data Center Automation Containerized Suite: 2017.01 until 2018.05
Operations Bridge Containerized Suite: 2017.11, 2018.02, 2018.05
Hybrid Cloud Management Containerized Suite: HCM2017.11, HCM2018.02, HCM2018.05

Exploitation Mechanism

The vulnerability allows for Remote Code Execution, enabling attackers to execute malicious code remotely.

Mitigation and Prevention

Immediate Steps to Take

Apply security patches provided by Micro Focus promptly.
Implement network segmentation to limit the impact of potential attacks.
Monitor network traffic for any suspicious activity.

Long-Term Security Practices

Regularly update and patch all software and systems to prevent vulnerabilities.
Conduct security assessments and penetration testing to identify and address weaknesses.

Patching and Updates

Micro Focus may release security patches to address this vulnerability. Stay informed about patch releases and apply them as soon as they are available.