CVE-2021-22055

published 2022-04-11

CVE-2021-22055: The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I L A N

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
vmware	photon_os	< 2022-02-16	2022-02-16
vmware	photon_os	—	—

CWE-74