CVEs-PoC/2021/CVE-2021-22502.md

### [CVE-2021-22502](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22502)
![](https://img.shields.io/static/v1?label=Product&message=Operation%20Bridge%20Reporter.&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=OBR%2010.40%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20Code%20execution.&color=brightgreen)

### Description

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

### POC

#### Reference
- http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html

#### Github
- https://github.com/20142995/nuclei-templates
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors