PT-2021-15111 · Micro Focus · Micro Focus Operations Agent

Published 2021-04-13 · Updated 2022-07-12 · CVE-2021-22505

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Agent versions 12.0x through 12.15

Description The issue allows for escalation of privileges in the Micro Focus Operations Agent. This could be exploited to escalate privileges and execute code under the account of the Operations Agent.

Recommendations For versions 12.0x through 12.15, update to a version that contains a fix for this issue, however, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2021-22505

Affected Products

Micro Focus Operations Agent

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-22505 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22505 · Vendor Advisory
• https://softwaresupport.softwaregrp.com/doc/KM03792442 · Note