Firetruck

CVE-2021-22017

KEV

VMware vCenter Server Improper Access Control

View CVE record →
Vendor / Project
VMware
Product
vCenter Server
Date added
Jan 10, 2022
Due date
Jan 24, 2022
Known ransomware use
Unknown
CWEs
CWE-23

Description

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.

Required action

Apply updates per vendor instructions.

Notes