[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frLsB4IZ877GDlE_mfLfkbrawEs8c4fzdiT1GXpdeGSA":3,"g5a-risk:CVE-2021-22497":126},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":48,"epssPercentile":25,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":60,"references":61,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":76,"cisaInfo":25,"otxData":25,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":122,"notableEvents":123},"CVE-2021-22497","What is CVE-2021-22497?","Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue.","2021-04-12T21:15:14.123","2023-11-07T03:30:13.513",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":37,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED",null,1.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":35,"ImpactScore":36},"f81092c5-7f14-476d-80dc-24857f90be84","Secondary",{"Version":19,"VectorString":32,"AttackVector":33,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":21,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"CVSS:3.1\u002FAV:P\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","PHYSICAL",3.8,0.2,3.6,[38],{"Source":16,"Type":17,"CVSSData":39,"BaseSeverity":45,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":40,"VectorString":41,"AccessVector":20,"AccessComplexity":21,"Authentication":42,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.00761,[48,48,48,48,48,48,48],"High",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"microfocus","netiq_advanced_authentication","*","cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":58,"criteria":59,"vulnerable":4},"6.3","cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*",2,[62],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fwww.netiq.com\u002Fdocumentation\u002Fadvanced-authentication-63\u002Fadvanced-authentication-releasenotes-634\u002Fdata\u002Fadvanced-authentication-releasenotes-634.html","Netiq",[],1,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2021-22497? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22497, a high severity cyber security vulnerability from 2021. Advanced Authentication versions prior to 6.3 SP4 have a po...","CVE-2021-22497, CVE-2021-22497 vulnerability, CVE-2021-22497 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, microfocus security, netiq_advanced_authentication vulnerability","\u002Fwhat-is\u002Fcve-2021-22497",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":9,"dateModified":10,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22497","Cybersecurity","CVE-2021-22497, CVE-2021-22497 vulnerability, CVE-2021-22497 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":25,"Negate":25,"Nodes":105},[106],{"Operator":107,"Negate":25,"CPEMatch":108},"OR",[109,111,113,116,119],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":110,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":58,"VersionEndIncluding":25},"7D8BAEC8-626A-4520-A89F-DB40CC774D87",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":112,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"689649F7-75D8-4D13-9A71-50C2908EACA5",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":115,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*","A0F82417-D88A-40C5-AD90-7AB826E29C2D",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":118,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*","0DD98BB8-7A85-41D6-B1CB-7849D61F085A",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":121,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*","729C4860-8CAC-4D4B-8C68-00B1E84E700A",[],[],{"lastModified":10,"cacheTime":125,"version":40},1792378746356,{"score":127,"band":128,"action":129,"scoredAt":130},46,"Medium","Plan remediation","2026-10-16T06:50:50.917491+00:00"]