CVE-2022-31698

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafted header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
vmwareCNA
---
---
CVEADP
---
---
CISA-ADPADP
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
vmwarecloud_foundation
3.0
vmwarecloud_foundation
3.0.1
vmwarecloud_foundation
3.0.1.1
vmwarecloud_foundation
3.5
vmwarecloud_foundation
3.5.1
vmwarecloud_foundation
3.7
vmwarecloud_foundation
3.7.1
vmwarecloud_foundation
3.7.2
vmwarecloud_foundation
3.8
vmwarecloud_foundation
3.8.1
vmwarecloud_foundation
3.9
vmwarecloud_foundation
3.9.1
vmwarecloud_foundation
3.10
vmwarecloud_foundation
3.10.1
vmwarecloud_foundation
3.10.1.1
vmwarecloud_foundation
3.10.1.2
vmwarecloud_foundation
3.10.2.1
vmwarecloud_foundation
3.10.2.2
vmwarecloud_foundation
3.11
vmwarecloud_foundation
4.0
vmwarecloud_foundation
4.0.1
vmwarecloud_foundation
4.1
vmwarecloud_foundation
4.1.0.1
vmwarecloud_foundation
4.2
vmwarecloud_foundation
4.2.1
vmwarecloud_foundation
4.3
vmwarecloud_foundation
4.3.1
vmwarecloud_foundation
4.4
vmwarecloud_foundation
4.4.1
vmwarecloud_foundation
4.4.1.1
vmwarevcenter_server
6.5
vmwarevcenter_server
6.5:a
vmwarevcenter_server
6.5:b
vmwarevcenter_server
6.5:c
vmwarevcenter_server
6.5:d
vmwarevcenter_server
6.5:e
vmwarevcenter_server
6.5:f
vmwarevcenter_server
6.5:update1
vmwarevcenter_server
6.5:update1b
vmwarevcenter_server
6.5:update1c
vmwarevcenter_server
6.5:update1d
vmwarevcenter_server
6.5:update1e
vmwarevcenter_server
6.5:update1g
vmwarevcenter_server
6.5:update2
vmwarevcenter_server
6.5:update2b
vmwarevcenter_server
6.5:update2c
vmwarevcenter_server
6.5:update2d
vmwarevcenter_server
6.5:update2g
vmwarevcenter_server
6.5:update3
vmwarevcenter_server
6.5:update3d
vmwarevcenter_server
6.5:update3f
vmwarevcenter_server
6.5:update3k
vmwarevcenter_server
6.5:update3n
vmwarevcenter_server
6.5:update3p
vmwarevcenter_server
6.5:update3q
vmwarevcenter_server
6.5:update3r
vmwarevcenter_server
6.5:update3s
vmwarevcenter_server
6.5:update3t
vmwarevcenter_server
6.7
vmwarevcenter_server
6.7:a
vmwarevcenter_server
6.7:b
vmwarevcenter_server
6.7:d
vmwarevcenter_server
6.7:update_3o
vmwarevcenter_server
6.7:update1
vmwarevcenter_server
6.7:update1b
vmwarevcenter_server
6.7:update2
vmwarevcenter_server
6.7:update2a
vmwarevcenter_server
6.7:update2c
vmwarevcenter_server
6.7:update3
vmwarevcenter_server
6.7:update3a
vmwarevcenter_server
6.7:update3b
vmwarevcenter_server
6.7:update3f
vmwarevcenter_server
6.7:update3g
vmwarevcenter_server
6.7:update3j
vmwarevcenter_server
6.7:update3l
vmwarevcenter_server
6.7:update3m
vmwarevcenter_server
6.7:update3n
vmwarevcenter_server
6.7:update3o
vmwarevcenter_server
6.7:update3p
vmwarevcenter_server
6.7:update3q
vmwarevcenter_server
6.7:update3r
vmwarevcenter_server
7.0
vmwarevcenter_server
7.0:a
vmwarevcenter_server
7.0:b
vmwarevcenter_server
7.0:c
vmwarevcenter_server
7.0:d
vmwarevcenter_server
7.0:update1
vmwarevcenter_server
7.0:update1a
vmwarevcenter_server
7.0:update1c
vmwarevcenter_server
7.0:update1d
vmwarevcenter_server
7.0:update2
vmwarevcenter_server
7.0:update2a
vmwarevcenter_server
7.0:update2b
vmwarevcenter_server
7.0:update2c
vmwarevcenter_server
7.0:update2d
vmwarevcenter_server
7.0:update3
vmwarevcenter_server
7.0:update3a
vmwarevcenter_server
7.0:update3c
vmwarevcenter_server
7.0:update3d
vmwarevcenter_server
7.0:update3e
vmwarevcenter_server
7.0:update3f
vmwarevcenter_server
7.0:update3g
vmwarevcenter_server
7.0:update3h
vmwarecloud_foundation
3.10.2
vmwarecloud_foundation
4.1.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
https://www.vmware.com/security/advisories/VMSA-2022-0030.html
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1588
https://www.vmware.com/security/advisories/VMSA-2022-0030.html