CVE-2021-22502

Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

Operation Bridge Reporter

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

8. Feb 2021

Ausgewertete Quellen

• Hersteller
  https://softwaresupport.softwaregrp.com/doc/KM03775947
• Hinweis
  http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-21-153/
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-21-154/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22502
• CISA
  Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
• NVD
  CVE-2021-22502