CVE-2021-22011

vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library

published September 23, 2021

CVSS
—
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to perform unauthenticated VM network setting manipulation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01092 · 64.9th percentile
Published
2021-09-23T11:51Z
EPSS history
Timeline
  • 23 SEP 11:51Z
    vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library
    cvelistv5