{"id":"CVE-2021-22535","aliases":["EUVD-2021-9677","GHSA-c4pp-f6g5-6wx8"],"status":"published","title":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource...","description":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00762,"percentile":0.55833,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2021-09-28T13:54:45Z","modified":"2026-06-17T03:37:23Z","products":[{"vendor":"microfocus","product":"netiq_directory_and_resource_administrator"}],"references":[{"url":"https://support.microfocus.com/kb/doc.php?id=7025273","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22535"},{"url":"https://github.com/advisories/GHSA-c4pp-f6g5-6wx8"}],"sources":{"cve":[{"id":"CVE-2021-22535","description":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.","status":"published","published":"2021-09-28T13:54:45Z","modified":"2024-08-03T18:44:14.07Z","updated_at":"2026-11-02T14:32:57.701381Z"}],"euvd":[{"id":"EUVD-2021-9677","description":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.","status":"published","published":"2021-09-28T13:54:45Z","modified":"2024-08-03T18:44:14Z","updated_at":"2026-11-03T03:25:02.042856Z"}],"ghsa":[{"id":"GHSA-c4pp-f6g5-6wx8","title":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource...","description":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.","status":"published","published":"2022-05-24T19:15:59Z","modified":"2023-01-30T05:02:21Z","cwes":["CWE-863"],"updated_at":"2026-11-02T14:46:37.149934Z"}],"nvd":[{"id":"CVE-2021-22535","description":"Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.","status":"published","published":"2021-09-28T14:15:07.63Z","modified":"2026-06-17T03:37:23.95Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.7,"vector":"AV:A/AC:L/Au:S/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:06:59.314106Z"}]}}