CVE-2021-22014

published 2021-09-23

CVE-2021-22014: The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user…

high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
vmware	cloud_foundation	>= 3.0 < 5.0	5.0
vmware	vcenter_server	—	—
vmware	vcenter_server	—	—
vmware	vcenter_server	—	—