CVE-2021-38123

Published: Sep 7, 2021Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Open Redirect vulnerability in Micro Focus Network Automation, affecting Network Automation versions 10.4x, 10.5x, 2018.05, 2018.11, 2019.05, 2020.02, 2020.08, 2020.11, 2021.05. The vulnerability could allow redirect users to malicious websites after authentication.

Affected (9)

Products: Microfocus: Network Automation

Microfocus

1 product

Network Automation

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Microfocus Network Automation	Version 10.40
Microfocus Network Automation	Version 10.50
Microfocus Network Automation	Version 2018.05
Microfocus Network Automation	Version 2018.11
Microfocus Network Automation	Version 2019.05
Microfocus Network Automation	Version 2020.02
Microfocus Network Automation	Version 2020.08
Microfocus Network Automation	Version 2020.11
Microfocus Network Automation	Version 2021.05

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

https://portal.microfocus.com/s/article/KM000001673

Source: security@opentext.com

https://portal.microfocus.com/s/article/KM000001673

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.