CVE-2021-21983
MEDIUM EXPLOITEDvRealize Operations Manager <8.4 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2021-21983 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Egor Dimitrenko, wvu, including a Metasploit module exploits/linux/http/vmware_vrops_mgr_ssrf_rce.
AI-analyzed exploit summary This Metasploit module exploits CVE-2021-21983 (file write) and CVE-2021-21975 (SSRF) in VMware vRealize Operations Manager to leak admin credentials and achieve remote code execution via a JSP payload. It chains SSRF for credential leakage and authenticated file write for payload deployment.
Description
Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system.
Exploits (3)
This Metasploit module exploits CVE-2021-21983 (file write) and CVE-2021-21975 (SSRF) in VMware vRealize Operations Manager to leak admin credentials and achieve remote code execution via a JSP payload. It chains SSRF for credential leakage and authenticated file write for payload deployment.
This repository provides a detailed technical analysis of CVE-2021-21983, including step-by-step exploitation steps, HTTP request/response examples, and screenshots. It demonstrates how to chain CVE-2021-21975 and CVE-2021-21983 to achieve RCE on VMware vRealize Operations Manager.
This repository provides a detailed technical analysis of CVE-2021-21983, including step-by-step exploitation steps, HTTP request/response examples, and screenshots. It demonstrates how to chain CVE-2021-21975 and CVE-2021-21983 to achieve RCE on VMware vRealize Operations Manager.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H