PT-2018-17589

CVE-2018-6498

·

Published

2018-08-30

·

Updated

2019-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Hybrid Cloud Management Containerized Suite versions HCM2017.11 through HCM2018.05 Operations Bridge Containerized Suite versions 2017.11 through 2018.05 Data Center Automation Containerized Suite versions 2017.01 through 2018.05 Service Management Automation Suite versions 2017.11 through 2018.05 Network Operations Management (NOM) Suite CDF versions 2017.11 through 2018.05
Description The issue allows for Remote Code Execution in several products.
Recommendations For Hybrid Cloud Management Containerized Suite versions HCM2017.11 through HCM2018.05, update to a version that contains a fix for this issue. For Operations Bridge Containerized Suite versions 2017.11 through 2018.05, update to a version that contains a fix for this issue. For Data Center Automation Containerized Suite versions 2017.01 through 2018.05, update to a version that contains a fix for this issue. For Service Management Automation Suite versions 2017.11 through 2018.05, update to a version that contains a fix for this issue. For Network Operations Management (NOM) Suite CDF versions 2017.11 through 2018.05, update to a version that contains a fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2018-6498
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com