What is CVE-2021-22022?

CVE-2021-22022 is a medium-severity vulnerability in Vmware Cloud_foundation, classified under Path Traversal. CVSS score: 4.9/10. Published 2021-08-30.

How severe is CVE-2021-22022?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Path Traversal in Vmware Cloud_foundation

CVE-2021-22022

The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to informat…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Vmware Cloud_foundation
Vmware Vrealize_operations_manager — versions 7.5.0
Vmware Vrealize_suite_lifecycle_manager
N/a Vmware Vrealize Operations — versions VMware vRealize Operations (8.x prior to 8.5)

Weakness classification (CWE)

CWE-22 — Path Traversal

References

security@vmware.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22022?: CVE-2021-22022 is a medium-severity vulnerability in Vmware Cloud_foundation, classified under Path Traversal. CVSS score: 4.9/10. Published 2021-08-30.
How severe is CVE-2021-22022?: Medium severity. CVSS v3 base score is 4.9 out of 10.