Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

概要

参考情報

• packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html · Exploit
• softwaresupport.softwaregrp.com/doc/KM03775947 · Vendor Advisory
• zerodayinitiative.com/advisories/ZDI-21-153 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-154 · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2021-22502

operation bridge reporter のその他の脆弱性

• CVE-2020-11856緊急 9.8Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability coul…
• CVE-2020-11857緊急 9.8An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could…
• CVE-2020-11855高 7.8An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could…