Not rated
CVE-2021-22012 The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API
Description
The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server | Versions not published |
References
- www.vmware.com www.vmware.com
Timeline
- Published
- Last modified
Other CVEs of VMware vCenter Server
The 14 CVEs of VMware vCenter Server →
CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability
7.5
High
CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
9.8
Critical
CVE-2024-37081
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An…
7.8
High
CVE-2024-37080
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol
9.8
Critical