CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-23
VMware vCenter Server rhttproxy URI Normalization Bypass Vulnerability (CVE-2021-22017) Technical Analysis and Hardening Guide
[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 without the VMSA-2021-0020 patch applied
[Impact] An unauthenticated attacker with network access to port 443 can bypass proxy restrictions via improper URI normalization, gaining unauthorized access to internal endpoints
[Mitigation] Immediately upgrade vCenter Server to the patched versions recommended in VMware Advisory VMSA-2021-0020