Medium severity · published Apr 11, 2022
CVE-2021-22055
The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter
5.3
CVSS
1%
EPSS
No
On KEV
Description
The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Photon OS · Vmware
before 2022-02-16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-22055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-22055
Third Party Advisory
https://github.com/vmware/photon/wiki/log_injection_vulnerability
More from Photon OS
9.8
CVE-2016-5333
VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of…
8.2
CVE-2020-10713
A flaw was found in grub2, prior to version 2.06
7.8
CVE-2022-22942
The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a…