Lucene search
PRIOn knowledge basePRION:CVE-2021-22017HistorySep 23, 2021 - 1:15 p.m.
Design/Logic Flaw
2021-09-2313:15:00
PRIOn knowledge base
www.prio-n.com
12
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vcenter_server | eq | 6.7 |
Related
nvd
nvd
CVE-2021-22017
2021-09-23 13:15:08
attackerkb
attackerkb
CVE-2021-22017
2021-09-23 00:00:00
cisa_kev
cisa_kev
VMware vCenter Server Improper Access Control
2022-01-10 00:00:00
cve
cve
CVE-2021-22017
2021-09-23 13:15:08
cvelist
cvelist
CVE-2021-22017
2021-09-23 12:13:01
nessus
nessus
VMware vCenter Server < 6.5 U3q Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
VMware vCenter Server < 6.7 Multiple Vulnerabilities (VMSA-2021-0020)
2021-09-22 00:00:00
ibm
ibm
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00
vmware
vmware
VMware vCenter Server updates address multiple security vulnerabilities
2021-09-21 00:00:00
VMware vCenter Server updates address multiple security vulnerabilities
2021-09-21 00:00:00
thn
thn
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
2021-09-22 03:09:00