Critical severity · published Apr 8, 2021
CVE-2021-22507
Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10
9.8
CVSS
1.7%
EPSS
No
On KEV
Description
Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Operations Bridge Manager · Microfocus
2019.05; 2019.11; 2020.05; 2020.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-22507
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-22507
softwaresupport.softwaregrp.com
https://softwaresupport.softwaregrp.com/doc/KM03793283
More from Operations Bridge Manager
9.8
CVE-2021-22504
Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10
9.8
CVE-2020-11854
Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) vulnerability in Micro Focus products…
8.8
CVE-2020-11853
Arbitrary code execution vulnerability affecting multiple Micro Focus products
7.8
CVE-2020-11858
Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge (containerized)
5.4
CVE-2022-38754
A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized