VULNERABILITY INTELLIGENCE

CVE-2021-22048

CVSS score8.8 HIGH

EPSS probability10.30%

CISA KEVNot currently listed

Published2021-11-10

Last modified2026-06-17

Description

The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group.