{"containers": {"cna": {"affected": [{"product": "Operations Agent", "vendor": "n/a", "versions": [{"status": "affected", "version": "12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15."}]}], "descriptions": [{"lang": "en", "value": "Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent."}], "problemTypes": [{"descriptions": [{"description": "Escalation of privileges", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-04-13T13:54:27", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://softwaresupport.softwaregrp.com/doc/KM03792442"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "ID": "CVE-2021-22505", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Operations Agent", "version": {"version_data": [{"version_value": "12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15."}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Escalation of privileges"}]}]}, "references": {"reference_data": [{"name": "https://softwaresupport.softwaregrp.com/doc/KM03792442", "refsource": "MISC", "url": "https://softwaresupport.softwaregrp.com/doc/KM03792442"}]}}}}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2021-22505", "datePublished": "2021-04-13T13:54:27", "dateReserved": "2021-01-05T00:00:00", "dateUpdated": "2021-04-13T13:54:27", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:operations_agent:12.0:*:*:*:*:*:*:*", "matchCriteriaId": "B386C147-D89B-45C2-9C68-545C1102F519", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.01:*:*:*:*:*:*:*", "matchCriteriaId": "1A21863B-4079-44B7-9E77-AEF2ACFEE866", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.02:*:*:*:*:*:*:*", "matchCriteriaId": "BCB70185-D717-4CCD-96D7-D87DB0B26D23", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.03:*:*:*:*:*:*:*", "matchCriteriaId": "BFAEA425-6775-422A-810F-34148C0568D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.04:*:*:*:*:*:*:*", "matchCriteriaId": "36D8E42D-76B8-44F1-9D5E-1E028856048B", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.05:*:*:*:*:*:*:*", "matchCriteriaId": "2CE2D00B-25CF-46C5-9A59-7288D027FF4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.06:*:*:*:*:*:*:*", "matchCriteriaId": "F4AF06A9-7934-49E4-BA84-4060F069FE12", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.10:*:*:*:*:*:*:*", "matchCriteriaId": "71E8620F-E030-4A29-9630-E52FE9F8CBAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.11:*:*:*:*:*:*:*", "matchCriteriaId": "7DCB40C1-168E-41AE-B346-C3579ECCE8B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.12:*:*:*:*:*:*:*", "matchCriteriaId": "89DB61A8-FE89-46FA-AE38-65B79998BB82", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.14:*:*:*:*:*:*:*", "matchCriteriaId": "B55488BF-8BF0-489C-8FEF-2B68F5964B15", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:operations_agent:12.15:*:*:*:*:*:*:*", "matchCriteriaId": "973DFAB3-05AE-49A0-917B-ADAD9C296322", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent."}, {"lang": "es", "value": "Una vulnerabilidad de escalada de privilegios en Micro Focus Operations Agent afecta a versiones 12.0x, 12.10, 12.11, 12.12, 12.14 y 12.15. La vulnerabilidad podr\u00eda ser explotada para escalar privilegios y ejecutar c\u00f3digo bajo la cuenta del Operations Agent"}], "id": "CVE-2021-22505", "lastModified": "2023-11-07T03:30:15.257", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-04-13T14:15:13.833", "references": [{"source": "security@opentext.com", "url": "https://softwaresupport.softwaregrp.com/doc/KM03792442"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}