CVE-2022-38757
Last modified
CVE-2022-38757 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. EPSS estimates a 0.84% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microfocus | Zenworks | < 2020 |
| Microfocus | Zenworks | 2020 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-38757?
How severe is CVE-2022-38757?
How do I fix CVE-2022-38757?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-38751Using snakeYAML to parse untrusted YAML files may be vulnera…6.5
- CVE-2022-38752Using snakeYAML to parse untrusted YAML files may be vulnera…6.5
- CVE-2022-38753This update resolves a multi-factor authentication bypass at…6.3
- CVE-2022-38754A potential vulnerability has been identified in Micro Focus…5.4
- CVE-2022-38755A vulnerability has been identified in Micro Focus Filr in v…5.3
- CVE-2022-38756A vulnerability has been identified in Micro Focus GroupWise…4.3
- CVE-2022-38758Cross-site Scripting (XSS) vulnerability in NetIQ iManager p…6.1
- CVE-2022-3876A vulnerability, which was classified as problematic, has be…6.5
- CVE-2022-38764A vulnerability on Trend Micro HouseCall version 1.62.1.1133…7.8
- CVE-2022-38765Canon Medical Informatics Vitrea Vision 7.7.76.1 does not ad…6.5
- CVE-2022-38766The remote keyless system on Renault ZOE 2021 vehicles sends…8.1
- CVE-2022-38767An issue was discovered in Wind River VxWorks 6.9 and 7, tha…7.5
Are you affected by CVE-2022-38757?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST