PT-2022-10689

CVE-2021-38125

·

Published

2022-04-11

·

Updated

2022-04-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Micro Focus Operations Bridge containerized versions 2021.05 through newer versions if upgraded from 2021.05 or 2021.08
Description The issue allows for unauthenticated remote code execution in the affected software. This could be exploited to execute code remotely without authentication.
Recommendations For versions 2021.05 and 2021.08, consider restricting access to the containerized deployment until a fix is available. For newer versions upgraded from 2021.05 or 2021.08, restrict access to the deployment to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾