Severity
Medium
Analysis Summary
CVE-2022-22982
VMware vCenter Server is vulnerable to server-side request forgery, caused by an unspecified flaw. By accessing a URL request outside of vCenter Server or accessing an internal service, an attacker could exploit this vulnerability to conduct SSRF attack.
Impact
- Information Theft
Indicators Of Compromise
CVE
- CVE-2022-22982
Affected Vendors
VMware
Affected Products
- VMware vCenter Server 6.5
- VMware vCenter Server 6.7
- VMware Cloud Foundation 3.0
- VMware Cloud Foundation 4.0
Remediation
Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.