Lucene search

[email protected]CVE-2021-22535

HistorySep 28, 2021 - 2:15 p.m.

CVE-2021-22535

2021-09-2814:15:07

CWE-863

[email protected]

web.nvd.nist.gov

cve-2021-22535

unauthorized disclosure

micro focus dra

infosec vulnerability

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.

Affected configurations

NVD

Node

microfocusnetiq_directory_and_resource_administratorRange<10.1.0.1

CPENameOperatorVersion
microfocus:netiq_directory_and_resource_administratormicrofocus netiq directory and resource administratorlt10.1.0.1

CPE	Name	Operator	Version
microfocus:netiq_directory_and_resource_administrator	microfocus netiq directory and resource administrator	lt	10.1.0.1

CNA Affected

[
  {
    "product": "Directory and Resource Administrator (DRA)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All DRA versions prior to 10.1 Patch 1"
      }
    ]
  }
]

References

support.microfocus.com/kb/doc.php?id=7025273

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

Related for CVE-2021-22535

prion1 nvd1 cvelist1