#VU56795 Improper Authorization in vCenter Server - CVE-2021-22006

Vulnerability identifier: #VU56795

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Amber

CVE-ID: CVE-2021-22006

CWE-ID: CWE-285

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerable software:
vCenter Server

Software vendor:
VMware, Inc

The vulnerability allows a remote attacker to gain unauthorized access to the system.

The vulnerability exist due to improper URI handling in reverse proxy. A remote non-authenticate attacker can send a specially crafted HTTP request to port 443/TCP and access restricted endpoints.

Install updates from vendor's website.

• https://www.vmware.com/security/advisories/VMSA-2021-0020.html