WID-SEC-2022-2291 — Micro Focus Operations Bridge: Schwachstelle ermöglicht Cross-Site Scripting

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Micro Focus Operations Bridge ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Operations Bridge ist eine containerisierte, autonome Überwachungslösung für hybride IT.

Vulnerabilities 1

High 8.0

CVE-2022-38754

CVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM us…

Micro Focus Micro Focus Operations Bridge- Containerized Micro Focus Operations Bridge Manager

Dec 8, 2022

Revision history

2022-12-12 #1
Initiale Fassung

References

Microfocus Support Portal vom 2022-12-12
https://portal.microfocus.com/s/article/KM000012518
Microfocus Support Portal vom 2022-12-12
https://portal.microfocus.com/s/article/KM000012517