« Volver al listado

CVE-2021-22521

Estado: ModificadaMedia (6.7)—

A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microfocus — Zenworks Configuration ManagementMicrofocus — Zenworks Endpoint Security Management

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-22521",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "ZENworks Configuration Management",
          "versions": [
            {
              "status": "affected",
              "version": "2020 Update 1 and all prior versions"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-07-30T21:15:08.047",
  "references": [
    {
      "url": "https://support.microfocus.com/kb/doc.php?id=7025205",
      "source": "security@opentext.com"
    },
    {
      "url": "https://support.microfocus.com/kb/doc.php?id=7025205",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad de escalada de privilegios en Micro Focus ZENworks Configuration Management, afectando la versión 2020 Update 1 y a todas las versiones anteriores. La vulnerabilidad podría ser explotada para alcanzar privilegios del sistema no autorizados"
    }
  ],
  "lastModified": "2026-06-17T03:37:22.453",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:zenworks_configuration_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5D32322-FE5C-46CF-AF72-6834DC7D1B6C",
              "versionEndExcluding": "2020"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:zenworks_configuration_management:2020:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01823302-51DF-45F5-85C6-5355A5DD6189"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:zenworks_configuration_management:2020:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C354C9B4-0474-40E4-9E24-7018853B814C"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:zenworks_endpoint_security_management:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40362922-DF3E-4C97-8CD8-5C861BD3449B",
              "versionEndExcluding": "2020"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:zenworks_endpoint_security_management:2020:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7FD9F35-A430-434C-BD52-CAFA88777155"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:zenworks_endpoint_security_management:2020:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "034F0345-8BC8-4CB4-8339-68312376C9B4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}