Lucene search
PRIOn knowledge basePRION:CVE-2021-22005HistorySep 23, 2021 - 12:15 p.m.
Design/Logic Flaw
2021-09-2312:15:00
PRIOn knowledge base
www.prio-n.com
12
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloud_foundation | ge | 3.0 | |
| cloud_foundation | lt | 5.0 | |
| vcenter_server | eq | 6.5 | |
| vcenter_server | eq | 6.7 | |
| vcenter_server | eq | 7.0 |
Related
cnvd
cnvd
VMware vCenter Server File Upload Vulnerability
2021-09-24 00:00:00
githubexploit
githubexploit
Exploit for Path Traversal in Vmware Cloud Foundation
2021-10-27 08:36:21
hivepro
hivepro
Drop everything and patch VMware’s vCenter Server Vulnerabilities
2021-09-22 13:29:07
malwarebytes
malwarebytes
A week in security (Sept 20 – Sept 26)
2021-09-27 11:01:42
Patch vCenter Server “right now”, VMWare expects CVE-2021-22005 exploitation within minutes of disclosure
2021-09-22 11:27:11
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
threatpost
threatpost
VMware Warns of Ransomware-Friendly Bug in vCenter Server
2021-09-22 16:17:33
SAS 2021: FinSpy Surveillance Kit Re-Emerges Stronger Than Ever
2021-09-28 17:45:59
Working PoC Is Out for VMware vCenter CVE-2021-22005 Flaw
2021-09-28 15:06:20
nuclei
nuclei
VMware vCenter Server - Arbitrary File Upload
2021-09-22 08:05:36
cisa
cisa
VMware vCenter Server Vulnerability CVE-2021-22005 Under Active Exploit
2021-09-24 00:00:00
metasploit
metasploit
VMware vCenter Server Analytics (CEIP) Service File Upload
2021-10-06 21:43:57
nessus
nessus
VMware vCenter Server Arbitrary File Upload (VMSA-2021-0020)
2021-10-06 00:00:00
VMware vCenter Server < 7.0 U2c Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
VMware vCenter Server < 6.7 Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
packetstorm
packetstorm
VMware vCenter Server Analytics (CEIP) Service File Upload
2021-10-07 00:00:00
nvd
nvd
CVE-2021-22005
2021-09-23 12:15:07
cve
cve
CVE-2021-22005
2021-09-23 12:15:07
checkpoint_advisories
checkpoint_advisories
VMWare vCenter Server Arbitrary File Upload (CVE-2021-22005)
2021-09-27 00:00:00
cvelist
cvelist
CVE-2021-22005
2021-09-23 11:37:30
cisa_kev
cisa_kev
VMware vCenter Server File Upload Vulnerability
2021-11-03 00:00:00
zdt
zdt
VMware vCenter Server Analytics (CEIP) Service File Upload Exploit
2021-10-07 00:00:00
attackerkb
attackerkb
CVE-2021-22005
2021-09-23 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-10-08 16:57:33
Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)
2021-09-21 19:55:35
Rapid7 2021 Wrap-Up: Highlights From a Year of Empowering the Protectors
2022-01-05 18:52:41
avleonov
avleonov
vmware
vmware
VMware vCenter Server updates address multiple security vulnerabilities
2021-09-21 00:00:00
VMware vCenter Server updates address multiple security vulnerabilities
2021-09-21 00:00:00
thn
thn
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
2021-09-22 03:09:00
qualysblog
qualysblog
ics
ics