CVE-2021-22017

Known Exploited (CISA KEV)MEDIUM

5.3

CVSS Severity Score

EPSS Score42.9240%

EPSS Percentile93.99th

Published2021年9月23日

Last Modified2025年10月30日

Vulnerability Description

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.

Affected Platforms (CPE)

📦

Vmware

Vcenter Server

= 6.7

References & Advisories

🔗 https://www.vmware.com/security/advisories/VMSA-2021-0020.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22017

Vulnerability Description

Affected Platforms (CPE)

Vcenter Server

References & Advisories

相關漏洞威脅