CVE

CVE-2021-22017

VMware vCenter Server Improper Access Control

VMware · vCenter Server

Date added (CISA)

2022-01-10

Remediation due

2022-01-24

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.