PT-2021-4316 · Vmware · Vcenter Server+1

George Noseevich + 2 · Published 2021-09-23 · Updated 2026-02-04 · CVE-2021-22017

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions vCenter Server (affected versions not specified)

Description The issue is related to improper implementation of URI normalization in the rhttproxy service used by vCenter Server. This allows a malicious actor with network access to port 443 on vCenter Server to exploit the issue and bypass proxy, leading to internal endpoints being accessed. The vulnerability is also described as an improper access control issue, which can be exploited by a remote attacker to bypass existing security restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2021-04925

CVE-2021-22017

Affected Products

Vmware Vcenter

Vcenter Server

References · 10

• https://osv.dev/vulnerability/CVE-2021-22017 · Vendor Advisory
• https://vmware.com/security/advisories/VMSA-2021-0020.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04925 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22017 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22017 · Note
• https://twitter.com/pdnuclei_bot/status/2019184223094255717 · Twitter Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cvenotify/117410 · Telegram Post
• https://t.me/cibsecurity/29284 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021092118 · Note