9.8Kritik
KEV
CVE-2021-22502Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
Aktif olarak istismar ediliyor — Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 03.11.2021 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 17.11.2021.
Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2021-22502
Açıklama
Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.
Zayıflık türü (CWE):
CWE-78
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| microfocus | operation bridge reporter | 10.40 | |
| — | Operation Bridge Reporter. | OBR 10.40 |
Kaynaklar ve yamalar
- https://softwaresupport.softwaregrp.com/doc/KM03775947 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-21-153/ Third Party AdvisoryVDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-21-154/ Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-In… ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22502 US Government Resource
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:microfocus:operation_bridge_reporter:10.40:*:*:*:*:*:*:*