CVE-2022-38757CWE-269

CVE-2022-38757 ZENworks

High · published December 23, 2022

CVSS v3.1
7.2
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-12-23T00:00Z
EPSS history
Timeline
  • 23 DEC 00:00Z
    CVE-2022-38757 ZENworks
    cvelistv5