CVE-2021-22050

ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelming rhttpproxy service with multiple requests.

Score

CVSS 3.1 7.5 High

Status

Modified - security@vmware.com

Published

2022-02-16

Last modified

2024-08-03

Weaknesses

CWE-770

Affected products

• Cloud Foundation (Vmware)
• Esxi (Vmware)

References

• https://www.vmware.com/security/advisories/VMSA-2022-0004.html