CVE-2022-22953 — VMware HCX Information Disclosure Vulnerability

txt

/api/admin/certificates
/api/admin/firewall
/api/admin/firewall/rules/1
/api/admin/firewall/rules/10
/api/admin/firewall/rules/2
/api/admin/firewall/rules/3
/api/admin/firewall/rules/4
/api/admin/firewall/rules/5
/api/admin/firewall/rules/6
/api/admin/firewall/rules/7
/api/admin/firewall/rules/8
/api/admin/firewall/rules/9
/api/admin/settings
/api/admin/ssh
/api/analytics
/api/appliances
/api/appliances/status
/api/appliances/{id}
/api/auth
/api/compute-profiles
/api/compute/clusters
/api/compute/clusters/1
/api/compute/clusters/10
/api/compute/clusters/2
/api/compute/clusters/3
/api/compute/clusters/4
/api/compute/clusters/5
/api/compute/clusters/6
/api/compute/clusters/7
/api/compute/clusters/8
/api/compute/clusters/9
/api/compute/networks
/api/compute/networks/1
/api/compute/networks/10
/api/compute/networks/2
/api/compute/networks/3
/api/compute/networks/4
/api/compute/networks/5
/api/compute/networks/6
/api/compute/networks/7
/api/compute/networks/8
/api/compute/networks/9
/api/interconnect
/api/interconnect/1/tunnels
/api/interconnect/10/tunnels
/api/interconnect/2/tunnels
/api/interconnect/3/tunnels
/api/interconnect/4/tunnels
/api/interconnect/5/tunnels
/api/interconnect/6/tunnels
/api/interconnect/7/tunnels
/api/interconnect/8/tunnels
/api/interconnect/9/tunnels
/api/interconnect/stats
/api/interconnect/tunnels
/api/internal/debug/tracepoint/101
/api/internal/debug/tracepoint/102
/api/internal/debug/tracepoint/103
/api/internal/debug/tracepoint/104
/api/internal/debug/tracepoint/105
/api/internal/debug/tracepoint/106
/api/internal/debug/tracepoint/107
/api/internal/debug/tracepoint/108
/api/internal/debug/tracepoint/109
/api/internal/debug/tracepoint/110
/api/internal/debug/tracepoint/111
/api/internal/debug/tracepoint/112
/api/internal/debug/tracepoint/113
/api/internal/debug/tracepoint/114
/api/internal/debug/tracepoint/115
/api/internal/debug/tracepoint/116
/api/internal/debug/tracepoint/117
/api/internal/debug/tracepoint/118
/api/internal/debug/tracepoint/119
/api/internal/debug/tracepoint/120
/api/internal/debug/tracepoint/121
/api/internal/debug/tracepoint/122
/api/internal/debug/tracepoint/123
/api/internal/debug/tracepoint/124
/api/internal/debug/tracepoint/125
/api/internal/debug/tracepoint/126
/api/internal/debug/tracepoint/127
/api/internal/debug/tracepoint/128
/api/internal/debug/tracepoint/129
/api/internal/debug/tracepoint/130
/api/internal/debug/tracepoint/131
/api/internal/debug/tracepoint/132
/api/internal/debug/tracepoint/133
/api/internal/debug/tracepoint/134
/api/internal/debug/tracepoint/135
/api/internal/debug/tracepoint/136
/api/internal/debug/tracepoint/137
/api/internal/debug/tracepoint/138
/api/internal/debug/tracepoint/139
/api/internal/debug/tracepoint/140
/api/internal/debug/tracepoint/141
/api/internal/debug/tracepoint/142
/api/internal/debug/tracepoint/143
/api/internal/debug/tracepoint/144
/api/internal/debug/tracepoint/145
/api/internal/debug/tracepoint/146
/api/internal/debug/tracepoint/147
/api/internal/debug/tracepoint/148
/api/internal/debug/tracepoint/149
/api/internal/debug/tracepoint/150
/api/internal/debug/tracepoint/151
/api/internal/debug/tracepoint/152
/api/internal/debug/tracepoint/153
/api/internal/debug/tracepoint/154
/api/internal/debug/tracepoint/155
/api/internal/debug/tracepoint/156
/api/internal/debug/tracepoint/157
/api/internal/debug/tracepoint/158
/api/internal/debug/tracepoint/159
/api/internal/debug/tracepoint/160
/api/internal/debug/tracepoint/161
/api/internal/debug/tracepoint/162
/api/internal/debug/tracepoint/163
/api/internal/debug/tracepoint/164
/api/internal/debug/tracepoint/165
/api/internal/debug/tracepoint/166
/api/internal/debug/tracepoint/167
/api/internal/debug/tracepoint/168
/api/internal/debug/tracepoint/169
/api/internal/debug/tracepoint/170
/api/internal/debug/tracepoint/171
/api/internal/debug/tracepoint/172
/api/internal/debug/tracepoint/173
/api/internal/debug/tracepoint/174
/api/internal/debug/tracepoint/175
/api/internal/debug/tracepoint/176
/api/internal/debug/tracepoint/177
/api/internal/debug/tracepoint/178
/api/internal/debug/tracepoint/179
/api/internal/debug/tracepoint/180
/api/internal/debug/tracepoint/181
/api/internal/debug/tracepoint/182
/api/internal/debug/tracepoint/183
/api/internal/debug/tracepoint/184
/api/internal/debug/tracepoint/185
/api/internal/debug/tracepoint/186
/api/internal/debug/tracepoint/187
/api/internal/debug/tracepoint/188
/api/internal/debug/tracepoint/189
/api/internal/debug/tracepoint/190
/api/internal/debug/tracepoint/191
/api/internal/debug/tracepoint/192
/api/internal/debug/tracepoint/193
/api/internal/debug/tracepoint/194
/api/internal/debug/tracepoint/195
/api/internal/debug/tracepoint/196
/api/internal/debug/tracepoint/197
/api/internal/debug/tracepoint/198
/api/internal/debug/tracepoint/199
/api/internal/debug/tracepoint/200
/api/internal/debug/tracepoint/201
/api/internal/debug/tracepoint/202
/api/internal/debug/tracepoint/203
/api/internal/debug/tracepoint/204
/api/internal/debug/tracepoint/205
/api/internal/debug/tracepoint/206
/api/internal/debug/tracepoint/207
/api/internal/debug/tracepoint/208
/api/internal/debug/tracepoint/209
/api/internal/debug/tracepoint/210
/api/internal/debug/tracepoint/211
/api/internal/debug/tracepoint/212
/api/internal/debug/tracepoint/213
/api/internal/debug/tracepoint/214
/api/internal/debug/tracepoint/215
/api/internal/debug/tracepoint/216
/api/internal/debug/tracepoint/217
/api/internal/debug/tracepoint/218
/api/internal/debug/tracepoint/219
/api/internal/debug/tracepoint/220
/api/internal/debug/tracepoint/221
/api/internal/debug/tracepoint/222
/api/internal/debug/tracepoint/223
/api/internal/debug/tracepoint/224
/api/internal/debug/tracepoint/225
/api/internal/debug/tracepoint/226
/api/internal/debug/tracepoint/227
/api/internal/debug/tracepoint/228
/api/internal/debug/tracepoint/229
/api/internal/debug/tracepoint/230
/api/internal/debug/tracepoint/231
/api/internal/debug/tracepoint/232
/api/internal/debug/tracepoint/233
/api/internal/debug/tracepoint/234
/api/internal/debug/tracepoint/235
/api/internal/debug/tracepoint/236
/api/internal/debug/tracepoint/237
/api/internal/debug/tracepoint/238
/api/internal/debug/tracepoint/239
/api/internal/debug/tracepoint/240
/api/internal/debug/tracepoint/241
/api/internal/debug/tracepoint/242
/api/internal/debug/tracepoint/243
/api/internal/debug/tracepoint/244
/api/internal/debug/tracepoint/245
/api/internal/debug/tracepoint/246
/api/internal/debug/tracepoint/247
/api/internal/debug/tracepoint/248
/api/internal/debug/tracepoint/249
/api/internal/debug/tracepoint/250
/api/internal/debug/tracepoint/251
/api/internal/debug/tracepoint/252
/api/internal/debug/tracepoint/253
/api/internal/debug/tracepoint/254
/api/internal/debug/tracepoint/255
/api/internal/debug/tracepoint/256
/api/internal/debug/tracepoint/257
/api/internal/debug/tracepoint/258
/api/internal/debug/tracepoint/259
/api/internal/debug/tracepoint/260
/api/internal/debug/tracepoint/261
/api/internal/debug/tracepoint/262
/api/internal/debug/tracepoint/263
/api/internal/debug/tracepoint/264
/api/internal/debug/tracepoint/265
/api/internal/debug/tracepoint/266
/api/internal/debug/tracepoint/267
/api/internal/debug/tracepoint/268
/api/internal/debug/tracepoint/269
/api/internal/debug/tracepoint/270
/api/internal/debug/tracepoint/271
/api/internal/debug/tracepoint/272
/api/internal/debug/tracepoint/273
/api/internal/debug/tracepoint/274
/api/internal/debug/tracepoint/275
/api/internal/debug/tracepoint/276
/api/internal/debug/tracepoint/277
/api/internal/debug/tracepoint/278
/api/internal/debug/tracepoint/279
/api/internal/debug/tracepoint/280
/api/internal/debug/tracepoint/281
/api/internal/debug/tracepoint/282
/api/internal/debug/tracepoint/283
/api/internal/debug/tracepoint/284
/api/internal/debug/tracepoint/285
/api/internal/debug/tracepoint/286
/api/internal/debug/tracepoint/287
/api/internal/debug/tracepoint/288
/api/internal/debug/tracepoint/289
/api/internal/debug/tracepoint/290
/api/internal/debug/tracepoint/291
/api/internal/debug/tracepoint/292
/api/internal/debug/tracepoint/293
/api/internal/debug/tracepoint/294
/api/internal/debug/tracepoint/295
/api/internal/debug/tracepoint/296
/api/internal/debug/tracepoint/297
/api/internal/debug/tracepoint/298
/api/internal/debug/tracepoint/299
/api/internal/debug/tracepoint/300
/api/internal/devmode/config/101
/api/internal/devmode/config/102
/api/internal/devmode/config/103
/api/internal/devmode/config/104
/api/internal/devmode/config/105
/api/internal/devmode/config/106
/api/internal/devmode/config/107
/api/internal/devmode/config/108
/api/internal/devmode/config/109
/api/internal/devmode/config/110
/api/internal/devmode/config/111
/api/internal/devmode/config/112
/api/internal/devmode/config/113
/api/internal/devmode/config/114
/api/internal/devmode/config/115
/api/internal/devmode/config/116
/api/internal/devmode/config/117
/api/internal/devmode/config/118
/api/internal/devmode/config/119
/api/internal/devmode/config/120
/api/internal/devmode/config/121
/api/internal/devmode/config/122
/api/internal/devmode/config/123
/api/internal/devmode/config/124
/api/internal/devmode/config/125
/api/internal/devmode/config/126
/api/internal/devmode/config/127
/api/internal/devmode/config/128
/api/internal/devmode/config/129
/api/internal/devmode/config/130
/api/internal/devmode/config/131
/api/internal/devmode/config/132
/api/internal/devmode/config/133
/api/internal/devmode/config/134
/api/internal/devmode/config/135
/api/internal/devmode/config/136
/api/internal/devmode/config/137
/api/internal/devmode/config/138
/api/internal/devmode/config/139
/api/internal/devmode/config/140
/api/internal/devmode/config/141
/api/internal/devmode/config/142
/api/internal/devmode/config/143
/api/internal/devmode/config/144
/api/internal/devmode/config/145
/api/internal/devmode/config/146
/api/internal/devmode/config/147
/api/internal/devmode/config/148
/api/internal/devmode/config/149
/api/internal/devmode/config/150
/api/internal/devmode/config/151
/api/internal/devmode/config/152
/api/internal/devmode/config/153
/api/internal/devmode/config/154
/api/internal/devmode/config/155
/api/internal/devmode/config/156
/api/internal/devmode/config/157
/api/internal/devmode/config/158
/api/internal/devmode/config/159
/api/internal/devmode/config/160
/api/internal/devmode/config/161
/api/internal/devmode/config/162
/api/internal/devmode/config/163
/api/internal/devmode/config/164
/api/internal/devmode/config/165
/api/internal/devmode/config/166
/api/internal/devmode/config/167
/api/internal/devmode/config/168
/api/internal/devmode/config/169
/api/internal/devmode/config/170
/api/internal/devmode/config/171
/api/internal/devmode/config/172
/api/internal/devmode/config/173
/api/internal/devmode/config/174
/api/internal/devmode/config/175
/api/internal/devmode/config/176
/api/internal/devmode/config/177
/api/internal/devmode/config/178
/api/internal/devmode/config/179
/api/internal/devmode/config/180
/api/internal/devmode/config/181
/api/internal/devmode/config/182
/api/internal/devmode/config/183
/api/internal/devmode/config/184
/api/internal/devmode/config/185
/api/internal/devmode/config/186
/api/internal/devmode/config/187
/api/internal/devmode/config/188
/api/internal/devmode/config/189
/api/internal/devmode/config/190
/api/internal/devmode/config/191
/api/internal/devmode/config/192
/api/internal/devmode/config/193
/api/internal/devmode/config/194
/api/internal/devmode/config/195
/api/internal/devmode/config/196
/api/internal/devmode/config/197
/api/internal/devmode/config/198
/api/internal/devmode/config/199
/api/internal/devmode/config/200
/api/internal/devmode/config/201
/api/internal/devmode/config/202
/api/internal/devmode/config/203
/api/internal/devmode/config/204
/api/internal/devmode/config/205
/api/internal/devmode/config/206
/api/internal/devmode/config/207
/api/internal/devmode/config/208
/api/internal/devmode/config/209
/api/internal/devmode/config/210
/api/internal/devmode/config/211
/api/internal/devmode/config/212
/api/internal/devmode/config/213
/api/internal/devmode/config/214
/api/internal/devmode/config/215
/api/internal/devmode/config/216
/api/internal/devmode/config/217
/api/internal/devmode/config/218
/api/internal/devmode/config/219
/api/internal/devmode/config/220
/api/internal/devmode/config/221
/api/internal/devmode/config/222
/api/internal/devmode/config/223
/api/internal/devmode/config/224
/api/internal/devmode/config/225
/api/internal/devmode/config/226
/api/internal/devmode/config/227
/api/internal/devmode/config/228
/api/internal/devmode/config/229
/api/internal/devmode/config/230
/api/internal/devmode/config/231
/api/internal/devmode/config/232
/api/internal/devmode/config/233
/api/internal/devmode/config/234
/api/internal/devmode/config/235
/api/internal/devmode/config/236
/api/internal/devmode/config/237
/api/internal/devmode/config/238
/api/internal/devmode/config/239
/api/internal/devmode/config/240
/api/internal/devmode/config/241
/api/internal/devmode/config/242
/api/internal/devmode/config/243
/api/internal/devmode/config/244
/api/internal/devmode/config/245
/api/internal/devmode/config/246
/api/internal/devmode/config/247
/api/internal/devmode/config/248
/api/internal/devmode/config/249
/api/internal/devmode/config/250
/api/internal/devmode/config/251
/api/internal/devmode/config/252
/api/internal/devmode/config/253
/api/internal/devmode/config/254
/api/internal/devmode/config/255
/api/internal/devmode/config/256
/api/internal/devmode/config/257
/api/internal/devmode/config/258
/api/internal/devmode/config/259
/api/internal/devmode/config/260
/api/internal/devmode/config/261
/api/internal/devmode/config/262
/api/internal/devmode/config/263
/api/internal/devmode/config/264
/api/internal/devmode/config/265
/api/internal/devmode/config/266
/api/internal/devmode/config/267
/api/internal/devmode/config/268
/api/internal/devmode/config/269
/api/internal/devmode/config/270
/api/internal/devmode/config/271
/api/internal/devmode/config/272
/api/internal/devmode/config/273
/api/internal/devmode/config/274
/api/internal/devmode/config/275
/api/internal/devmode/config/276
/api/internal/devmode/config/277
/api/internal/devmode/config/278
/api/internal/devmode/config/279
/api/internal/devmode/config/280
/api/internal/devmode/config/281
/api/internal/devmode/config/282
/api/internal/devmode/config/283
/api/internal/devmode/config/284
/api/internal/devmode/config/285
/api/internal/devmode/config/286
/api/internal/devmode/config/287
/api/internal/devmode/config/288
/api/internal/devmode/config/289
/api/internal/devmode/config/290
/api/internal/devmode/config/291
/api/internal/devmode/config/292
/api/internal/devmode/config/293
/api/internal/devmode/config/294
/api/internal/devmode/config/295
/api/internal/devmode/config/296
/api/internal/devmode/config/297
/api/internal/devmode/config/298
/api/internal/devmode/config/299
/api/internal/devmode/config/300
/api/logs
/api/logs/activity
/api/logs/audit
/api/logs/audit/1
/api/logs/audit/10
/api/logs/audit/2
/api/logs/audit/3
/api/logs/audit/4
/api/logs/audit/5
/api/logs/audit/6
/api/logs/audit/7
/api/logs/audit/8
/api/logs/audit/9
/api/migration-plans
/api/migration-waves
/api/migration-waves/1/vms
/api/migration-waves/10/vms
/api/migration-waves/2/vms
/api/migration-waves/3/vms
/api/migration-waves/4/vms
/api/migration-waves/5/vms
/api/migration-waves/6/vms
/api/migration-waves/7/vms
/api/migration-waves/8/vms
/api/migration-waves/9/vms
/api/migration/schedules
/api/migrations
/api/migrations/1
/api/migrations/10
/api/migrations/2
/api/migrations/3
/api/migrations/4
/api/migrations/5
/api/migrations/6
/api/migrations/7
/api/migrations/8
/api/migrations/9
/api/network-extension
/api/network-extension/1/status
/api/network-extension/10/status
/api/network-extension/2/status
/api/network-extension/3/status
/api/network-extension/4/status
/api/network-extension/5/status
/api/network-extension/6/status
/api/network-extension/7/status
/api/network-extension/8/status
/api/network-extension/9/status
/api/network-extension/config
/api/network-extension/status
/api/roles
/api/sessions
/api/sitepairings
/api/sitepairings/1/details
/api/sitepairings/10/details
/api/sitepairings/2/details
/api/sitepairings/3/details
/api/sitepairings/4/details
/api/sitepairings/5/details
/api/sitepairings/6/details
/api/sitepairings/7/details
/api/sitepairings/8/details
/api/sitepairings/9/details
/api/sitepairings/connections
/api/system/status
/api/system/update
/api/system/update/patches/1
/api/system/update/patches/10
/api/system/update/patches/2
/api/system/update/patches/3
/api/system/update/patches/4
/api/system/update/patches/5
/api/system/update/patches/6
/api/system/update/patches/7
/api/system/update/patches/8
/api/system/update/patches/9
/api/test/endpoint/101
/api/test/endpoint/102
/api/test/endpoint/103
/api/test/endpoint/104
/api/test/endpoint/105
/api/test/endpoint/106
/api/test/endpoint/107
/api/test/endpoint/108
/api/test/endpoint/109
/api/test/endpoint/110
/api/test/endpoint/111
/api/test/endpoint/112
/api/test/endpoint/113
/api/test/endpoint/114
/api/test/endpoint/115
/api/test/endpoint/116
/api/test/endpoint/117
/api/test/endpoint/118
/api/test/endpoint/119
/api/test/endpoint/120
/api/test/endpoint/121
/api/test/endpoint/122
/api/test/endpoint/123
/api/test/endpoint/124
/api/test/endpoint/125
/api/test/endpoint/126
/api/test/endpoint/127
/api/test/endpoint/128
/api/test/endpoint/129
/api/test/endpoint/130
/api/test/endpoint/131
/api/test/endpoint/132
/api/test/endpoint/133
/api/test/endpoint/134
/api/test/endpoint/135
/api/test/endpoint/136
/api/test/endpoint/137
/api/test/endpoint/138
/api/test/endpoint/139
/api/test/endpoint/140
/api/test/endpoint/141
/api/test/endpoint/142
/api/test/endpoint/143
/api/test/endpoint/144
/api/test/endpoint/145
/api/test/endpoint/146
/api/test/endpoint/147
/api/test/endpoint/148
/api/test/endpoint/149
/api/test/endpoint/150
/api/test/endpoint/151
/api/test/endpoint/152
/api/test/endpoint/153
/api/test/endpoint/154
/api/test/endpoint/155
/api/test/endpoint/156
/api/test/endpoint/157
/api/test/endpoint/158
/api/test/endpoint/159
/api/test/endpoint/160
/api/test/endpoint/161
/api/test/endpoint/162
/api/test/endpoint/163
/api/test/endpoint/164
/api/test/endpoint/165
/api/test/endpoint/166
/api/test/endpoint/167
/api/test/endpoint/168
/api/test/endpoint/169
/api/test/endpoint/170
/api/test/endpoint/171
/api/test/endpoint/172
/api/test/endpoint/173
/api/test/endpoint/174
/api/test/endpoint/175
/api/test/endpoint/176
/api/test/endpoint/177
/api/test/endpoint/178
/api/test/endpoint/179
/api/test/endpoint/180
/api/test/endpoint/181
/api/test/endpoint/182
/api/test/endpoint/183
/api/test/endpoint/184
/api/test/endpoint/185
/api/test/endpoint/186
/api/test/endpoint/187
/api/test/endpoint/188
/api/test/endpoint/189
/api/test/endpoint/190
/api/test/endpoint/191
/api/test/endpoint/192
/api/test/endpoint/193
/api/test/endpoint/194
/api/test/endpoint/195
/api/test/endpoint/196
/api/test/endpoint/197
/api/test/endpoint/198
/api/test/endpoint/199
/api/test/endpoint/200
/api/test/endpoint/201
/api/test/endpoint/202
/api/test/endpoint/203
/api/test/endpoint/204
/api/test/endpoint/205
/api/test/endpoint/206
/api/test/endpoint/207
/api/test/endpoint/208
/api/test/endpoint/209
/api/test/endpoint/210
/api/test/endpoint/211
/api/test/endpoint/212
/api/test/endpoint/213
/api/test/endpoint/214
/api/test/endpoint/215
/api/test/endpoint/216
/api/test/endpoint/217
/api/test/endpoint/218
/api/test/endpoint/219
/api/test/endpoint/220
/api/test/endpoint/221
/api/test/endpoint/222
/api/test/endpoint/223
/api/test/endpoint/224
/api/test/endpoint/225
/api/test/endpoint/226
/api/test/endpoint/227
/api/test/endpoint/228
/api/test/endpoint/229
/api/test/endpoint/230
/api/test/endpoint/231
/api/test/endpoint/232
/api/test/endpoint/233
/api/test/endpoint/234
/api/test/endpoint/235
/api/test/endpoint/236
/api/test/endpoint/237
/api/test/endpoint/238
/api/test/endpoint/239
/api/test/endpoint/240
/api/test/endpoint/241
/api/test/endpoint/242
/api/test/endpoint/243
/api/test/endpoint/244
/api/test/endpoint/245
/api/test/endpoint/246
/api/test/endpoint/247
/api/test/endpoint/248
/api/test/endpoint/249
/api/test/endpoint/250
/api/test/endpoint/251
/api/test/endpoint/252
/api/test/endpoint/253
/api/test/endpoint/254
/api/test/endpoint/255
/api/test/endpoint/256
/api/test/endpoint/257
/api/test/endpoint/258
/api/test/endpoint/259
/api/test/endpoint/260
/api/test/endpoint/261
/api/test/endpoint/262
/api/test/endpoint/263
/api/test/endpoint/264
/api/test/endpoint/265
/api/test/endpoint/266
/api/test/endpoint/267
/api/test/endpoint/268
/api/test/endpoint/269
/api/test/endpoint/270
/api/test/endpoint/271
/api/test/endpoint/272
/api/test/endpoint/273
/api/test/endpoint/274
/api/test/endpoint/275
/api/test/endpoint/276
/api/test/endpoint/277
/api/test/endpoint/278
/api/test/endpoint/279
/api/test/endpoint/280
/api/test/endpoint/281
/api/test/endpoint/282
/api/test/endpoint/283
/api/test/endpoint/284
/api/test/endpoint/285
/api/test/endpoint/286
/api/test/endpoint/287
/api/test/endpoint/288
/api/test/endpoint/289
/api/test/endpoint/290
/api/test/endpoint/291
/api/test/endpoint/292
/api/test/endpoint/293
/api/test/endpoint/294
/api/test/endpoint/295
/api/test/endpoint/296
/api/test/endpoint/297
/api/test/endpoint/298
/api/test/endpoint/299
/api/test/endpoint/300
/api/transport/metrics
/api/users

Fuzz this list of API endpoints