PT-2022-10689 · Micro Focus · Micro Focus Operations Bridge

Published 2022-04-11 · Updated 2022-04-18 · CVE-2021-38125

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Micro Focus Operations Bridge containerized versions 2021.05 through newer versions if upgraded from 2021.05 or 2021.08

Description The issue allows for unauthenticated remote code execution in the affected software. This could be exploited to execute code remotely without authentication.

Recommendations For versions 2021.05 and 2021.08, consider restricting access to the containerized deployment until a fix is available. For newer versions upgraded from 2021.05 or 2021.08, restrict access to the deployment to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-38125

Affected Products

Micro Focus Operations Bridge

References · 4

• https://osv.dev/vulnerability/CVE-2021-38125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38125 · Security Note
• https://portal.microfocus.com/s/article/KM000005303?language=en_US · Note
• https://t.me/cvenotify/28727 · Telegram Post