VYPR
← All advisories
High severity7.2NVD Advisory· Published Dec 23, 2022· Updated Jun 17, 2026

CVE-2022-38757

CVE-2022-38757

Description

A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices, to be able to exercise these rights on managed devices in the ZENworks zone but which are outside the scope of the administrator. This vulnerability does not result in the administrators gaining additional rights on the managed devices, either in the scope or outside the scope of the administrator.

Affected products

11
  • Microfocus/ZENworks7 versions
    cpe:2.3:a:microfocus:zenworks:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microfocus:zenworks:*:*:*:*:*:*:*:*range: <2020
    • cpe:2.3:a:microfocus:zenworks:2020:-:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:zenworks:2020:update1:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:zenworks:2020:update2:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:zenworks:2020:update3:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:zenworks:2020:update3a:*:*:*:*:*:*
    • (no CPE)range: <=2020 Update 3a
  • Microfocus/Asset Management Xcpe-rescue
    Range: ZENworks 2020
  • Microfocus/Zenworks Configuration Managementcpe-rescue
    Range: ZENworks 2020
  • Microfocus/Zenworks Endpoint Security Managementcpe-rescue
    Range: ZENworks 2020
  • Micro Focus/ZENworks Patch Management (ZPM)v5
    Range: ZENworks 2020

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.