Actively exploited in the wild
VMware vCenter Server Improper Access Control
VMware - vCenter Server · Listed in the CISA KEV since 2022-01-10. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-22017
MediumCVSS 5.3KEVSummary
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
Risk Assessment
An attacker could bypass the proxy and access internal endpoints, potentially leading to unauthorized access to resources.
Recommendation
Apply available security updates for vCenter Server to fix the vulnerability.
Other vulnerabilities in vCenter Server
See all- CVE-2024-38812CriticalActively exploited
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet, potentially leading to remote code execution.
- CVE-2024-37079CriticalActively exploited
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.
- CVE-2022-22948MediumActively exploited
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.
Original NVD description (English source)
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.