CVE Vulnerabilities

CVE-2021-22507

Improper Authentication

Published: Apr 08, 2021 | Modified: Nov 07, 2023
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Operations_bridge_manager Microfocus 2019.05 (including) 2019.05 (including)
Operations_bridge_manager Microfocus 2019.11 (including) 2019.11 (including)
Operations_bridge_manager Microfocus 2020.05 (including) 2020.05 (including)
Operations_bridge_manager Microfocus 2020.10 (including) 2020.10 (including)

Potential Mitigations

References