VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
60
CVE-2021-22050
—CVSS 3.1
7.5 high
EPSS
2%p82
Published
()
Modified
Description
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelming rhttpproxy service with multiple requests.
- Vendors
- vmware
- Products
- cloud foundation, esxi
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H