CVE-2021-38129 Information disclosure in Micro Focus Operations Agent.
A local non-privileged user can access system monitoring data collected by Micro Focus Operations Agent, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-38129?
CVE-2021-38129 is a low-severity vulnerability in Micro Focus Operations Agent., published on 25 Jan 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Escalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting versions 12.x up to and including 12.21. The vulnerability could be exploited by a non-privileged local user to access system monitoring data collected by Operations Agent.
Which versions are affected by CVE-2021-38129?
It affects 1 product.
Products include Microfocus Operations Agent.
How do I fix CVE-2021-38129?
No fix has been published for CVE-2021-38129 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-38129 being exploited?
There is no known exploitation of CVE-2021-38129 in the wild and no public exploit code.
Other vulnerabilities in Micro Focus Operations Agent.
- CVE-2021-22505 Privilege escalation in Operations Agent
- CVE-2024-0622 Local privilege escalation vulnerability could affect OpenText Operations Agent on Non-Windows platforms.
- CVE-2026-2123 Privilege escalation vulnerability in Operations Agent
- CVE-2020-11861 Privilege escalation in Operations Agent
- CVE-2019-17085 XML external entity in Operations Agent
Sources
Also known as GHSA-fmxg-gfhc-xwr3.