title: Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.
description: Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge (containerized) and Application Performance Management. The vulneravility affects: 1.) Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions. 2.) Operations Bridge (containerized) 2020.05, 2019.08, 2019.05, 2018.11, 2018.08, 2018.05. 2018.02 and 2017.11. 3.) Application Performance Management versions 9,51, 9.50 and 9.40 with uCMDB 10.33 CUP 3. The vulnerability could allow Arbitrary code execution.
problem types: Arbitrary code execution
affected:
{
product: Application Performance Management
vendor: Micro Focus
versions:
status: affected, version: 9.51
status: affected, version: 9.50
status: affected, version: 9.40
}
{
product: Operation Bridge (containerized)
vendor: Micro Focus
versions:
status: affected, version: 2020.05
status: affected, version: 2019.08
status: affected, version: 2019.05
status: affected, version: 2018.11
status: affected, version: 2018.08
status: affected, version: 2018.05
status: affected, version: 2018.02
status: affected, version: 2017.11
}
{
product: Operation Bridge Manager
vendor: Micro Focus
versions:
status: affected, version: 2020.05
status: affected, version: 2019.11
status: affected, version: 2019.05
status: affected, version: 2018.11
status: affected, version: 2018.05
status: affected, version: 10.63
status: affected, version: 10.62
status: affected, version: 10.61
status: affected, version: 10.60
status: affected, version: 10.12
status: affected, version: 10.11
lessThanOrEqual: 10.10, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
exploits: Arbitrary code execution.
solutions: For Operation Bridge Manager https://softwaresupport.softwaregrp.com/doc/KM03747658
For Operation Bridge (containerized) https://softwaresupport.softwaregrp.com/doc/KM03747854
For Application Performance Management https://softwaresupport.softwaregrp.com/doc/KM03747657