CVE-2021-22535 Information disclosure in Directory and Resource Administrator (DRA)
An unauthorized information disclosure vulnerability in Micro Focus DRA allows attackers to access sensitive data without proper authorization.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22535?
CVE-2021-22535 is a medium-severity vulnerability in Directory and Resource Administrator (DRA), published on 28 Sep 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.
Weakness: CWE-863
Which versions are affected by CVE-2021-22535?
It affects 1 product.
Products include Microfocus Netiq Directory and Resource Administrator.
How do I fix CVE-2021-22535?
No fix has been published for CVE-2021-22535 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-22535 being exploited?
There is no known exploitation of CVE-2021-22535 in the wild and no public exploit code.
Sources
Also known as GHSA-c4pp-f6g5-6wx8.