CVE-2021-22005

9.8CRITICAL

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code

发布于: 9/23/2021更新于: 10/30/2025
在NVD查看在MITRE查看

CISA已知被利用漏洞

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.

所需操作:

Apply updates per vendor instructions.

截止日期:

2021-11-17

已知勒索软件使用

描述

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

AI分析AI驱动

受影响产品

vmwarecloud_foundation
vmwarevcenter_server
6.5
vmwarevcenter_server
6.7
vmwarevcenter_server
7.0

参考资料