CVE Vulnerability

CVE-2022-38757

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.

7.2 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://kmviewer.saas.microfocus.com/#/PH_206720 Broken Link
https://portal.microfocus.com/s/article/KM000012895?language=en_US Vendor Advisory
https://kmviewer.saas.microfocus.com/#/PH_206719 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:microfocus:zenworks:2020:-:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update1:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update2:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update3:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update3a:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:*:*:*:*:*:*:*:*
Information

Published : 2022-12-23 04:15

Updated : 2023-01-04 06:00

NVD link : CVE-2022-38757

Mitre link : CVE-2022-38757

Products Affected
No products.
CWE
CWE-269