VulnerabilityModified

CVE-2021-22507

Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10.

CRITICAL 9.8EPSS 1.68%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.68% probability · 76th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: microfocus/operations bridge manager
Source: security@opentext.com

References

https://softwaresupport.softwaregrp.com/doc/KM03793283
https://softwaresupport.softwaregrp.com/doc/KM03793283

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.