{"containers": {"cna": {"affected": [{"product": "Network Automation.", "vendor": "n/a", "versions": [{"status": "affected", "version": "Network Automation (NA) versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05."}]}], "descriptions": [{"lang": "en", "value": "Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication."}], "problemTypes": [{"descriptions": [{"description": "Open Redirect.", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-09-07T16:48:24", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://portal.microfocus.com/s/article/KM000001673"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "ID": "CVE-2021-38123", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Network Automation.", "version": {"version_data": [{"version_value": "Network Automation (NA) versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05."}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Open Redirect."}]}]}, "references": {"reference_data": [{"name": "https://portal.microfocus.com/s/article/KM000001673", "refsource": "MISC", "url": "https://portal.microfocus.com/s/article/KM000001673"}]}}}}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2021-38123", "datePublished": "2021-09-07T16:48:24", "dateReserved": "2021-08-04T00:00:00", "dateUpdated": "2021-09-07T16:48:24", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microfocus:network_automation:10.40:*:*:*:*:*:*:*", "matchCriteriaId": "42545A63-B5CA-4668-8AD0-4D341AEBE531", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:10.50:*:*:*:*:*:*:*", "matchCriteriaId": "EBC2D47A-E969-4E42-95DB-34859638DEA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2018.05:*:*:*:*:*:*:*", "matchCriteriaId": "0BE62C5B-6464-4096-9324-5A9CCCFFECAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2018.11:*:*:*:*:*:*:*", "matchCriteriaId": "6814B971-E024-4096-86C3-8D4EA13FBE39", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2019.05:*:*:*:*:*:*:*", "matchCriteriaId": "31890072-DB70-452B-BF01-41F8E46147CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2020.02:*:*:*:*:*:*:*", "matchCriteriaId": "1BBF1A50-1ABB-40B0-90D0-B5A5E344B219", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2020.08:*:*:*:*:*:*:*", "matchCriteriaId": "E4D2BA93-BD51-4D66-95EE-A90F7221B7EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2020.11:*:*:*:*:*:*:*", "matchCriteriaId": "8E96A589-803F-4FA4-98C5-DEBBDF3FA589", "vulnerable": true}, {"criteria": "cpe:2.3:a:microfocus:network_automation:2021.05:*:*:*:*:*:*:*", "matchCriteriaId": "D9F1E6FF-D0BD-4558-B8B3-391F6A8C6A52", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication."}, {"lang": "es", "value": "Una vulnerabilidad de redirecci\u00f3n abierta en Micro Focus Network Automation, que afecta a las versiones 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05 de Network Automation. La vulnerabilidad podr\u00eda permitir redirigir a usuarios a sitios web maliciosos despu\u00e9s de la autenticaci\u00f3n"}], "id": "CVE-2021-38123", "lastModified": "2023-11-07T03:37:14.523", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-09-07T17:15:07.280", "references": [{"source": "security@opentext.com", "url": "https://portal.microfocus.com/s/article/KM000001673"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}