CVE-2021-22502

Опубликовано: 08 фев. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Критический

Описание

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

Ссылки

http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://softwaresupport.softwaregrp.com/doc/KM03775947
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-153/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-154/
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://softwaresupport.softwaregrp.com/doc/KM03775947
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-153/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-154/
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22502
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microfocus:operation_bridge_reporter:10.40:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.93981

Критический

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-9f78-r2f6-597q

CVSS3: 9.8

github

больше 3 лет назад

BDU:2021-04036

CVSS3: 9.8

fstec

больше 5 лет назад

Уязвимость программного обеспечения для ИТ-отчетности Operation Bridge Reporter (OBR), связанная с некорректной обработкой параметров конечной точки LogonResource, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 100%

0.93981

Критический

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78