Skip to content
OpenAdvisories
Unscored CVE-2021-22013 EUVD-2021-9182GHSA-44m9-8fq6-h94w

The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malici…

Published Sep 23, 2021 · Updated Aug 3, 2024 · Assigned by vmware

Description

The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

Affected products

VendorProductAffectedFixed
— VMware vCenter Server VMware vCenter Server 6.5 before 6.5 U3q —

References