CVE-2021-38123
First published: Tue Sep 07 2021(Updated: )
Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.
Credit: security@microfocus.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microfocus Network Automation | =10.40 | |
| Microfocus Network Automation | =10.50 | |
| Microfocus Network Automation | =2018.05 | |
| Microfocus Network Automation | =2018.11 | |
| Microfocus Network Automation | =2019.05 | |
| Microfocus Network Automation | =2020.02 | |
| Microfocus Network Automation | =2020.08 | |
| Microfocus Network Automation | =2020.11 | |
| Microfocus Network Automation | =2021.05 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-38123?
CVE-2021-38123 is an Open Redirect vulnerability in Micro Focus Network Automation.
Which versions of Micro Focus Network Automation are affected by CVE-2021-38123?
Micro Focus Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, and 2021.05 are affected by CVE-2021-38123.
What is the severity of CVE-2021-38123?
CVE-2021-38123 has a severity score of 6.1 (medium).
How does CVE-2021-38123 impact users?
CVE-2021-38123 can redirect users to malicious websites after authentication.
How can I fix CVE-2021-38123?
To fix CVE-2021-38123, update to a patched version of Micro Focus Network Automation.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/microfocus
- canonical/microfocus network automation
- version/microfocus network automation/10.40
- version/microfocus network automation/10.50
- version/microfocus network automation/2018.05
- version/microfocus network automation/2018.11
- version/microfocus network automation/2019.05
- version/microfocus network automation/2020.02
- version/microfocus network automation/2020.08
- version/microfocus network automation/2020.11
- version/microfocus network automation/2021.05