CVE-2021-22055 Vulnerability Details

  /     /     /  

CVE-2021-22055 Metadata Quick Info

CVE Published: 11/04/2022 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: vmware | Vendor: n/a | Product: Photon OS
Status : PUBLISHED

---

CVE-2021-22055 Description

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Heap-based buffer overflow issues via Cortado ThinPrint
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).