CVE-2021-21973
MEDIUM KEV NUCLEIVMware vCenter Server and Cloud Foundation - Server-Side Request Forgery via vSphere Client Plugin
Title source: llmExploitation Summary
CVE-2021-21973 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 7, 2022. EIP tracks 1 public exploit from researchers including freakanonymous. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-21973, a directory traversal vulnerability in VMware vRealize Operations Manager. The exploit crafts malicious TAR archives to deploy a JSP webshell, enabling remote code execution (RCE) on vulnerable systems.
Description
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
Exploits (1)
This repository contains a functional exploit for CVE-2021-21973, a directory traversal vulnerability in VMware vRealize Operations Manager. The exploit crafts malicious TAR archives to deploy a JSP webshell, enabling remote code execution (RCE) on vulnerable systems.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N