What is CVE-2021-38120?

CVE-2021-38120 is a medium-severity vulnerability in Microfocus Netiq_advanced_authentication, classified under Command Injection. CVSS score: 5.1/10. Published 2024-08-28.

How severe is CVE-2021-38120?

Medium severity. CVSS v3 base score is 5.1 out of 10.

RCE in Microfocus Netiq_advanced_authentication

CVE-2021-38120

A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled functionality of backup due to improper handling in provided command parameters. This issue affects NetIQ Advance Authenti…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.005 (40.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L.

Affected products

Microfocus Netiq_advanced_authentication — versions 6.3
Opentext Netiq Advance Authentication — versions 6.3.5.1

Weakness classification (CWE)

CWE-77 — Command Injection

References

security@opentext.com (Release Notes)

Frequently asked questions

What is CVE-2021-38120?: CVE-2021-38120 is a medium-severity vulnerability in Microfocus Netiq_advanced_authentication, classified under Command Injection. CVSS score: 5.1/10. Published 2024-08-28.
How severe is CVE-2021-38120?: Medium severity. CVSS v3 base score is 5.1 out of 10.