Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-38757

Опубликовано: 23 дек. 2022
Источник: nvd
CVSS3: 7.2
EPSS Низкий

Описание

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:zenworks:*:*:*:*:*:*:*:*
Версия до 2020 (исключая)
cpe:2.3:a:microfocus:zenworks:2020:-:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update1:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update2:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update3:*:*:*:*:*:*
cpe:2.3:a:microfocus:zenworks:2020:update3a:*:*:*:*:*:*

EPSS

Процентиль: 62%
0.00425
Низкий

7.2 High

CVSS3

Дефекты

CWE-269
CWE-269

Связанные уязвимости

CVSS3: 7.2
github
около 3 лет назад

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.

EPSS

Процентиль: 62%
0.00425
Низкий

7.2 High

CVSS3

Дефекты

CWE-269
CWE-269