CVE-2021-22006

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI

published September 23, 2021

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to access restricted endpoints.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06611 · 93.8th percentile
Published
2021-09-23T11:41Z
EPSS history
Timeline
  • 23 SEP 11:41Z
    The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI
    cvelistv5