CVE-2021-22005

9.8CRITICAL

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code

公開日: 9/23/2021更新日: 10/30/2025
NVDで表示MITREで表示

CISA既知の悪用された脆弱性

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.

必要な対応:

Apply updates per vendor instructions.

期限:

2021-11-17

既知のランサムウェア使用

説明

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

AI分析AIによる分析

影響を受ける製品

vmwarecloud_foundation
vmwarevcenter_server
6.5
vmwarevcenter_server
6.7
vmwarevcenter_server
7.0

参照