← Back

CVE-2022-22982

nvd nist
Published: Jul 13, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access to 443 on the vCenter Server may exploit this issue by accessing a URL request outside of vCenter Server or accessing an internal service.

Affected (69)

Vmware
2 products
Cloud Foundation
Vcenter Server
Configuration A
69 vulnerable
Vulnerable SoftwareAffected Versions
Vmware
Cloud Foundation
From 3.0 to 3.11
Cloud Foundation
From 4.0 to 4.3.1
Vmware
Vcenter Server
Version 6.5
Vcenter Server
Version 6.5 a
Vcenter Server
Version 6.5 b
Vcenter Server
Version 6.5 c
Vcenter Server
Version 6.5 d
Vcenter Server
Version 6.5 e
Vcenter Server
Version 6.5 f
Vcenter Server
Version 6.5 update1
Vcenter Server
Version 6.5 update1b
Vcenter Server
Version 6.5 update1c
Vcenter Server
Version 6.5 update1d
Vcenter Server
Version 6.5 update1e
Vcenter Server
Version 6.5 update1g
Vcenter Server
Version 6.5 update2
Vcenter Server
Version 6.5 update2b
Vcenter Server
Version 6.5 update2c
Vcenter Server
Version 6.5 update2d
Vcenter Server
Version 6.5 update2g
Vcenter Server
Version 6.5 update3
Vcenter Server
Version 6.5 update3d
Vcenter Server
Version 6.5 update3f
Vcenter Server
Version 6.5 update3k
Vcenter Server
Version 6.5 update3n
Vcenter Server
Version 6.5 update3p
Vcenter Server
Version 6.5 update3q
Vcenter Server
Version 6.5 update3r
Vcenter Server
Version 6.5 update3s
Vcenter Server
Version 6.7
Vcenter Server
Version 6.7 a
Vcenter Server
Version 6.7 b
Vcenter Server
Version 6.7 d
Vcenter Server
Version 6.7 update1
Vcenter Server
Version 6.7 update1b
Vcenter Server
Version 6.7 update2
Vcenter Server
Version 6.7 update2a
Vcenter Server
Version 6.7 update2c
Vcenter Server
Version 6.7 update3
Vcenter Server
Version 6.7 update3a
Vcenter Server
Version 6.7 update3b
Vcenter Server
Version 6.7 update3f
Vcenter Server
Version 6.7 update3g
Vcenter Server
Version 6.7 update3j
Vcenter Server
Version 6.7 update3l
Vcenter Server
Version 6.7 update3m
Vcenter Server
Version 6.7 update3n
Vcenter Server
Version 6.7 update3o
Vcenter Server
Version 6.7 update3p
Vcenter Server
Version 6.7 update3q
Vcenter Server
Version 7.0
Vcenter Server
Version 7.0 a
Vcenter Server
Version 7.0 b
Vcenter Server
Version 7.0 c
Vcenter Server
Version 7.0 d
Vcenter Server
Version 7.0 update1
Vcenter Server
Version 7.0 update1a
Vcenter Server
Version 7.0 update1c
Vcenter Server
Version 7.0 update1d
Vcenter Server
Version 7.0 update2
Vcenter Server
Version 7.0 update2a
Vcenter Server
Version 7.0 update2b
Vcenter Server
Version 7.0 update2c
Vcenter Server
Version 7.0 update2d
Vcenter Server
Version 7.0 update3
Vcenter Server
Version 7.0 update3a
Vcenter Server
Version 7.0 update3c
Vcenter Server
Version 7.0 update3d
Vcenter Server
Version 7.0 update3e

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

Source: security@vmware.com
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory

Timeline

No history available yet.