MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution

Vulnerability

A potential vulnerability has been identified in the Operations Bridge Manager capability of the Micro Focus Operations Bridge containerized suite (versions 2017.11, 2018.02, 2018.05, 2018.08). The flaw could allow both remote code execution and information disclosure [1]. The exact technical details of the bug have not been publicly disclosed in the available references.

Exploitation

The available references do not specify the required attack vector, authentication level, or specific sequence of steps. It is described as a potential vulnerability that could be exploited remotely [1]. No further exploitation details are provided in the reference material.

Impact

Successful exploitation could lead to remote code execution and information disclosure [1]. The impact affects the confidentiality, integrity, and availability of the affected systems, though the scope and privilege level are not detailed in the references.

Mitigation

Micro Focus released a security bulletin (MFSBGN03829 rev.1) on 2018-11-07 and likely provided a fix or upgrade path. Users should update to a patched version of the Operations Bridge containerized suite as recommended by the vendor [1]. No workaround details are provided in the reference.