CVE-2021-22505 Privilege escalation in Operations Agent
Attackers can escalate privileges and execute code under the Operations Agent account, requiring immediate patching for system integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22505?
CVE-2021-22505 is a critical vulnerability in Operations Agent, published on 13 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent.
Which versions are affected by CVE-2021-22505?
It affects 1 product.
Products include Microfocus Operations Agent.
How do I fix CVE-2021-22505?
No fix has been published for CVE-2021-22505 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22505 being exploited?
There is no known exploitation of CVE-2021-22505 in the wild and no public exploit code.
Other vulnerabilities in Operations Agent
- CVE-2024-0622 Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.
- CVE-2026-2123 Privilege escalation vulnerability in Operations Agent
- CVE-2020-11861 Privilege escalation in Operations Agent
- CVE-2019-17085 XML external entity in Operations Agent
- CVE-2021-38129 Information disclosure in Micro Focus Operations Agent.
Sources
Also known as GHSA-f2xv-v8vm-h6ch.