PT-2021-4314

CVE-2021-22020

Published

2021-09-23

Updated

2021-09-30

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions vCenter Server (affected versions not specified)

Description The issue is related to insufficient input validation in the Analytics service of VMware vCenter Server and VMware Cloud Foundation, which can lead to a denial-of-service condition. Successful exploitation may allow an attacker to cause a denial-of-service on vCenter Server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

George

Sergey

Webpentest

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2021-22020