medium6.5
CVE-2021-21983
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network acc…
Impact
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Cloud Foundation | Versions 3.0, 3.0.1, 3.0.1.1, 3.5, 3.5.1, 3.7 |
| Vmware | Vrealize Operations Manager | Versions 7.0.0, 7.5.0, 8.0.0, 8.0.1, 8.1.0, 8.1.1 |
| Vmware | Vrealize Suite Lifecycle Manager | Versions 8.0, 8.0.1, 8.1, 8.2 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
- https://www.vmware.com/security/advisories/VMSA-2021-0004.html
- http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
- https://www.vmware.com/security/advisories/VMSA-2021-0004.html