8.6Yüksek
CVE-2026-2123Privilege escalation vulnerability in Operations Agent
Açıklama
A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability
Zayıflık türü (CWE):
CWE-280
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| microfocus | operations agent | 12.22 – ≤ 12.29 | |
| OpenText | Operations Agent | OA 12.22 – ≤ OA 12.29 |
Kaynaklar ve yamalar
- https://portal.microfocus.com/s/article/KM000046068 customer-entitlementVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:microfocus:operations_agent:*:*:*:*:*:*:*:*≥ 12.22 ≤ 12.29