CVE-2021-22018

Description

The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS Score

Exploitation Probability

0.375

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in VMware vCenter 7.0	Windows
Multiple Vulnerabilities are affected in VMware vCenter Server 7.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234