Vulnerability · Published Jul 12, 2021 · Assigned by microfocus
CVE-2021-22515Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server
Medium 4.8
In plain English
A medium-severity security flaw in NetIQ Advanced Authentication from Micro Focus. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.7%top 47.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Multi-Factor Authentication (MFA) functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Micro Focus | NetIQ Advanced Authentication | NetIQ Advanced Authentication – before 6.3 SP4 Patch 1 |