ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service condition by overwhelming rhttpproxy service with multiple requests.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-22050
• https://www.vmware.com/security/advisories/VMSA-2022-0004.html