medium5.3
CVE-2022-31698
The vCenter Server contains a denial-of-service vulnerability in the content library service.
Impact
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | Versions 3.0, 3.0.1, 3.0.1.1, 3.5, 3.5.1, 3.7 |
| Vmware | Vcenter Server | Versions 6.5, 6.7, 7.0 |