« Volver al listado

CVE-2021-38123

Estado: ModificadaMedia (6.1)—

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Network Automation

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-38123",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Network Automation.",
          "versions": [
            {
              "status": "affected",
              "version": "Network Automation (NA) versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05."
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-09-07T17:15:07.280",
  "references": [
    {
      "url": "https://portal.microfocus.com/s/article/KM000001673",
      "source": "security@opentext.com"
    },
    {
      "url": "https://portal.microfocus.com/s/article/KM000001673",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de redirección abierta en Micro Focus Network Automation, que afecta a las versiones 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05 de Network Automation. La vulnerabilidad podría permitir redirigir a usuarios a sitios web maliciosos después de la autenticación"
    }
  ],
  "lastModified": "2026-06-17T04:01:31.470",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:10.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42545A63-B5CA-4668-8AD0-4D341AEBE531"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:10.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBC2D47A-E969-4E42-95DB-34859638DEA0"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2018.05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BE62C5B-6464-4096-9324-5A9CCCFFECAF"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2018.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6814B971-E024-4096-86C3-8D4EA13FBE39"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2019.05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31890072-DB70-452B-BF01-41F8E46147CD"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2020.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BBF1A50-1ABB-40B0-90D0-B5A5E344B219"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2020.08:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4D2BA93-BD51-4D66-95EE-A90F7221B7EA"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2020.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E96A589-803F-4FA4-98C5-DEBBDF3FA589"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:network_automation:2021.05:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9F1E6FF-D0BD-4558-B8B3-391F6A8C6A52"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}