CVE-2018-18590
Last modified
CVE-2018-18590 is a critical-severity vulnerability rated 9.6/10 on the CVSS scale. A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.. EPSS estimates a 1.03% chance of exploitation in the next 30 days.
Description
A potential remote code execution and information disclosure vulnerability exists in Micro Focus Operations Bridge containerized suite versions 2017.11, 2018.02, 2018.05, 2018.08. This vulnerability could allow for information disclosure.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Operations Bridge | 2017.11 |
| Microfocus | Operations Bridge | 2018.02 |
| Microfocus | Operations Bridge | 2018.05 |
| Microfocus | Operations Bridge | 2018.08 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-18590?
How severe is CVE-2018-18590?
How do I fix CVE-2018-18590?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-18584In mspack/cab.h in libmspack before 0.8alpha and cabextract …6.5
- CVE-2018-18585chmd_read_headers in mspack/chmd.c in libmspack before 0.8al…4.3
- CVE-2018-18586chmextract.c in the chmextract sample program, as distribute…
- CVE-2018-18587BigProf AppGini 5.70 stores the passwords in the database us…
- CVE-2018-18589A potential Remote Arbitrary Code Execution vulnerability ha…6.3
- CVE-2018-1859IBM API Connect 5.0.0.0 through 5.0.8.4 could allow a user a…4.3
- CVE-2018-18591A potential unauthorized disclosure of data vulnerability ha…6.8
- CVE-2018-18593Remote Directory Traversal and Remote Disclosure of Privileg…6.5
- CVE-2018-18599Stegdetect through 2018-05-26 has an out-of-bounds write in …
- CVE-2018-18600The remote upgrade feature in Guardzilla GZ180 devices allow…8.1
- CVE-2018-18601The TK_set_deviceModel_req_handle function in the cloud comm…8.1
- CVE-2018-18602The Cloud API on Guardzilla smart cameras allows user enumer…9.8
Are you affected by CVE-2018-18590?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST