PT-2021-15112 · Micro Focus · Operation Bridge Manager

Published 2021-04-08 · Updated 2021-04-14 · CVE-2021-22507

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Bridge Manager versions 2019.05 through 2020.10

Description The issue allows remote attackers to bypass user authentication, resulting in unauthorized access.

Recommendations For versions 2019.05 through 2020.10, update to a version that includes the fix for this issue to prevent authentication bypass.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-22507

Affected Products

Operation Bridge Manager

References · 4

• https://osv.dev/vulnerability/CVE-2021-22507 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22507 · Security Note
• https://softwaresupport.softwaregrp.com/doc/KM03793283 · Note
• https://t.me/cvenotify/13226 · Telegram Post