medium5.3
CVE-2021-22055
The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter.
Impact
The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Photon Os | before 2022-02-16 |