« Volver al listado

CVE-2021-22517

Estado: ModificadaAlta (8.8)—

A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microfocus — Data Protector

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-22517",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@opentext.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Data Protector",
          "versions": [
            {
              "status": "affected",
              "version": "10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-08-05T21:15:10.953",
  "references": [
    {
      "url": "https://portal.microfocus.com/s/article/KM000001460",
      "source": "security@opentext.com"
    },
    {
      "url": "https://portal.microfocus.com/s/article/KM000001460",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una posible vulnerabilidad de escalada de privilegios no autorizada en Micro Focus Data Protector. La vulnerabilidad afecta las versiones 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 y 10.91. Un usuario privilegiado puede potencialmente usar inapropiadamente esta funcionalidad y permitir así un acceso no intencionado y no autorizado a los datos"
    }
  ],
  "lastModified": "2026-06-17T03:37:22.117",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24DC50FA-D787-4715-8B21-C2120D566FCF"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB3C11A5-FE44-444C-ABE5-954801CB33DB"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3D06B57-54F9-4405-B499-631D33933702"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C01AB63-5FA4-4800-954A-2218048313A4"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BA8B0B3-580F-40EA-85BB-7490C17F7A21"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "909C0404-14C7-4C5C-B5CE-65C83E82EC2C"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1110D5DF-270C-443A-98C2-2591118ADBB8"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.70:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4690EB0-DB47-498C-B0B8-9070019281BB"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.80:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D3AFCF2-C7E7-43D4-B142-34B549BB94A7"
            },
            {
              "criteria": "cpe:2.3:a:microfocus:data_protector:10.91:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9C88D11-4FDA-4C19-B6B6-4AFE6E13A133"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@opentext.com"
}