What’s Vulnerable › Vulnerabilities

CVE-2021-22311

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-22 · updated 2026-06-17
• Weakness: CWE-276

Description

There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include: ManageOne versions 8.0.0, 8.0.1.

Affected products

• ManageOne: 8.0.0, 8.0.1

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en

Get alerted when CVE-2021-22311 or the next vulnerability affects your stack