CVE-2021-22521

Published: Jul 30, 2021Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges.

Affected (6)

Products: Microfocus: Zenworks Configuration Management, Zenworks Endpoint Security Management

Microfocus

2 products

Zenworks Configuration Management

Zenworks Endpoint Security Management

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microfocus Zenworks Configuration Management	Before 2020
Microfocus Zenworks Configuration Management	Version 2020
Microfocus Zenworks Configuration Management	Version 2020 update1
Microfocus Zenworks Endpoint Security Management	Before 2020
Microfocus Zenworks Endpoint Security Management	Version 2020
Microfocus Zenworks Endpoint Security Management	Version 2020 update1

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://support.microfocus.com/kb/doc.php?id=7025205

Source: security@opentext.com

https://support.microfocus.com/kb/doc.php?id=7025205

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.