Vulnerability · Published Jul 30, 2021 · Assigned by microfocus

CVE-2021-22521

Medium 6.7

In plain English

A medium-severity security flaw in ZENworks Configuration Management. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS NVD)6.7Medium
Exploit odds (30 days)0.2%top 84.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges.

Affected products (as reported)

VendorProductVersions
n/a ZENworks Configuration Management 2020 Update 1 and all prior versions

References