CVE:CVE-2018-6499
CNNVD:CNNVD-201808-962
Micro Focus Hybrid Cloud Management Containerized Suite等都是英国Micro Focus公司的产品。Micro Focus Hybrid Cloud Management Containerized Suite是一款混合云管理容器化套件。Operations Bridge Containerized Suite是一套容器式IT运维监控解决方案。
多款Micro Focus产品中存在安全漏洞。远程攻击者可利用该漏洞执行代码。以下产品和版本受到影响：Micro Focus Hybrid Cloud Management Containerized Suite HCM2017.11版本，HCM2018.02版本，HCM2018.05版本；Operations Bridge Containerized Suite 2017.11版本，2018.02版本，2018.05版本；Data Center Automation Containerized Suite 2017.01版本至2018.05版本；Service Management Automation Suite 2017.11版本，2018.02版本，2018.05版本；Service Virtualization (SV)（使用APLS 10.7之前版本的带有浮动许可证）；Unified Functional Testing (UFT)（使用APLS 10.7之前版本并带有浮动许可证）；Network Virtualization (NV)（使用APLS 10.7之前版本并带有浮动许可证）；Network Operations Management (NOM) Suite CDF 2017.11版本，2018.02版本，2018.05版本。
solution:Upgrade microfocus data_center_automation to a higher version than 2017.01,2017.05,2017.08,2017.09,2017.11,2018.02,2018.05,and avoid the version 2017.01,2017.05,2017.08,2017.09,2017.11,2018.02,2018.05; Upgrade microfocus hybrid_cloud_management to a higher version than 2017.11,2018.02,2018.05,and avoid the version 2017.11,2018.02,2018.05; Upgrade microfocus network_operations_management to a higher version than 2017.11,2018.02,2018.05,and avoid the version 2017.11,2018.02,2018.05; Upgrade microfocus operations_bridge to a higher version than 2017.11,2018.02,2018.05,and avoid the version 2017.11,2018.02,2018.05; Upgrade microfocus service_management_automation to a higher version than 2017.11,2018.02,2018.05,and avoid the version 2017.11,2018.02,2018.05; Upgrade microfocus network_virtualization to a higher version than 12.50,and avoid the version 12.50; Upgrade microfocus service_virtualization to a higher version than 1.00,and avoid the version 1.00; Upgrade microfocus unified_functional_testing to a higher version than 12.50,and avoid the version 12.50