CVE-2021-22502

Description

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-22502
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-9648
• https://softwaresupport.softwaregrp.com/doc/KM03775947
• https://www.zerodayinitiative.com/advisories/ZDI-21-153/
• https://www.zerodayinitiative.com/advisories/ZDI-21-154/
• http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html