Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-22517

Опубликовано: 05 авг. 2021
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:data_protector:10.0:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.10:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.20:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.30:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.40:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.50:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.60:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.70:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.80:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:data_protector:10.91:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.00504
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

A potential unauthorized privilege escalation vulnerability has been identified in Micro Focus Data Protector. The vulnerability affects versions 10.10, 10.20, 10.30, 10.40, 10.50, 10.60, 10.70, 10.80, 10.0 and 10.91. A privileged user may potentially misuse this feature and thus allow unintended and unauthorized access of data.

EPSS

Процентиль: 66%
0.00504
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo