CVE-2021-22012

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API

published September 23, 2021

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01384 · 71.8th percentile
Published
2021-09-23T11:58Z
EPSS history
Timeline
  • 23 SEP 11:58Z
    The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API
    cvelistv5