PT-2021-15110 · Micro Focus · Micro Focus Operations Bridge Manager

Published 2021-02-12 · Updated 2021-02-18 · CVE-2021-22504

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Bridge Manager versions 10.1x through 10.6x, 2018.05 through 2020.10

Description The issue is an arbitrary code execution vulnerability that could allow remote attackers to execute arbitrary code on an OBM server. This could potentially lead to significant security breaches.

Recommendations For versions 10.1x through 10.6x, 2018.05 through 2020.10, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-22504

Affected Products

Micro Focus Operations Bridge Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-22504 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22504 · Vendor Advisory
• https://softwaresupport.softwaregrp.com/doc/KM03777855 · Note
• https://t.me/cvenotify/9898 · Telegram Post
• https://t.me/cibsecurity/23567 · Telegram Post