vmware cloud-foundation CVE-2021-22005 vulnerability in VMware Products
Published on September 23, 2021

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.

Vendor Advisory NVD

Known Exploited Vulnerability

This VMware vCenter Server File Upload vulnerability is part of CISA's list of Known Exploited Vulnerabilities. VMware vCenter Server file upload vulnerability in the VMware-analytics service that allows to execute code on vCenter Server.

The following remediation steps are recommended / required by November 17, 2021: Apply updates per vendor instructions.

Vulnerability Analysis

CVE-2021-22005 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

What is a Directory traversal Vulnerability?

The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVE-2021-22005 has been classified to as a Directory traversal vulnerability or weakness.


Products Associated with CVE-2021-22005

You can be notified by stack.watch whenever vulnerabilities like CVE-2021-22005 are published in these products:

VMware Cloud Foundation
 
VMware Vcenter Server
 

What versions are vulnerable to CVE-2021-22005?