Vulnerability · Published Sep 23, 2021 · Assigned by vmware
CVE-2021-22013
High 7.5
In plain English
A high-severity security flaw in VMware vCenter Server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.7%top 23.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware vCenter Server | VMware vCenter Server 6.5 before 6.5 U3q |
References
- https://www.vmware.com/security/advisories/VMSA-2021-0020.html x_refsource_MISC