QID 38836

QID 38836: Micro Focus Operations Bridge Reporter (OBR) Remote Code Execution Vulnerability

Operations Bridge Manager (OBM) is the core component of the Operations Bridge Suite. It dynamically and automatically discovers and correlates data, event topology, and metrics.

Affected Versions:
Micro Foucs Operations Bridge Manager version 10.40 on Linux
Note: Older versions may also be affected.

QID Detection Logic:
This QID sends a crafted HTTP Request to determine if the system is vulnerable.

An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary code on the system.

CVSS V3 rated as Critical - 9.8 severity.

CVSS V2 rated as Critical - 10 severity.

Solution

Customers are advised to upgrade to the latest version of Micro Focus Operations Bridge Manager.

Vendor References

KM03775947 - softwaresupport.softwaregrp.com/doc/KM03775947

CVEs related to QID 38836

CVE-2021-22502 |

Software Advisories

Advisory ID	Software	Component	Link
KM03775947	Linux		softwaresupport.softwaregrp.com/doc/KM03775947

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].