CVE-2021-22502

🗓️ 08 Feb 2021 21:12:35Reported by microfocusType

Remote Code Execution in Micro Focus OBR 10.4

Reporter	Title	Published	Views	Family All 28
0day.today	Micro Focus Operations Bridge Reporter Unauthenticated Command Injection Exploit	30 Apr 202100:00	–	zdt
ATTACKERKB	CVE-2021-22502	8 Feb 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the IT reporting software Operation Bridge Reporter (OBR) arises from improper processing of parameters related to the final login resource point. This allows a perpetrator to execute arbitrary code.	12 Aug 202100:00	–	bdu_fstec
Circl	CVE-2021-22502	9 Feb 202100:39	–	circl
CISA KEV Catalog	Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability	3 Nov 202100:00	–	cisa_kev
CNNVD	Micro Focus Operation Bridge 操作系统命令注入漏洞	8 Feb 202100:00	–	cnnvd
CNVD	Micro Focus Operations Bridge Reporter Remote Code Execution Vulnerability	9 Feb 202100:00	–	cnvd
Check Point Advisories	Micro Focus Operations Bridge Reporter Remote Code Execution (CVE-2021-22502)	5 Apr 202100:00	–	checkpoint_advisories
CVE	CVE-2021-22502	8 Feb 202121:12	–	cve
Metasploit	Micro Focus Operations Bridge Reporter Unauthenticated Command Injection	30 Apr 202117:42	–	metasploit

[
  {
    "product": "Operation Bridge Reporter.",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OBR 10.40"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-153/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-154/
softwaresupport	www.softwaresupport.softwaregrp.com/doc/KM03775947

30 Apr 2021 16:06Current

10High risk

Vulners AI Score10

EPSS0.968