title: Micro Focus Container Deployment Foundation (CDF), Remote Code Execution
description: Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite 2017.11, 2018.02, 2018.05 and Network Operations Management (NOM) Suite CDF 2017.11, 2018.02, 2018.05 will allow Remote Code Execution.
problem types: Remote Code Execution
affected:
{
product:  Network Operations Management (NOM) Suite CDF
vendor: Micro Focus
versions:
status: affected, version: 2017.11, 2018.02, 2018.05
}
{
product: Service Management Automation Suite
vendor: Micro Focus
versions:
status: affected, version: 2017.11, 2018.02, 2018.05
}
{
product: Data Center Automation Containerized Suite
vendor: Micro Focus
versions:
status: affected, version: 2017.01 until 2018.05
}
{
product: Operations Bridge Containerized Suite
vendor: Micro Focus
versions:
status: affected, version: 2017.11, 2018.02, 2018.05
}
{
product: Hybrid Cloud Management Containerized Suite
vendor: Micro Focus
versions:
status: affected, version: HCM2017.11, HCM2018.02, HCM2018.05
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
version: 3.0
]
exploits: Remote Code Execution