VMware vCenter Server Improper Access Control

概要

参考情報

• vmware.com/security/advisories/VMSA-2021-0020.html · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2021-22017

vcenter server のその他の脆弱性

• CVE-2026-59310緊急 9.8悪用確認済み（CISA KEV）VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may explo…
• CVE-2026-59309緊急 9.8VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCe…
• CVE-2024-38813緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this v…
• CVE-2024-38812緊急 9.8悪用確認済み（CISA KEV）The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network acces…
• CVE-2024-37087中 5.3The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server may create a denial-o…