PromptRiskDBThreat intelligence atlas

CVE-2021-21973 - VMware vCenter Server and Cloud Foundation

AI Vulnerability Context

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMw...

Overview

A source-backed snapshot of this vulnerability.

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

CISA KEVyesWhether CISA lists this as exploited.
Techniques0AI attack methods connected to this vulnerability.
Case studies0Examples where this vulnerability is mentioned.

Vulnerability status

How serious this vulnerability is and whether it is known to be exploited.

CISA KEVMEDIUM
CVE ID
CVE-2021-21973
Vendor/project
VMware
Product
vCenter Server and Cloud Foundation
Vulnerability name
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
Date added
2022-03-07
Due date
2022-03-21
Known ransomware campaign use
Unknown
CVSS v3
5.3
CWE-20CWE-918

Exploit context

What the vulnerability is about.

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

Related AI techniques

AI attack methods connected to this vulnerability.

View all related techniques →
No related AI attack methods. No AI attack method is connected to this vulnerability in the current data.

Related case studies

Examples where this vulnerability is mentioned.

View all case studies →
No related case studies. No case study currently mentions this vulnerability.

Source evidence

Original public records and references for this page.

View all sources →

Original source

Original source links

Open the public records and source datasets used for this page.

NVD CVE pagehttps://nvd.nist.gov/vuln/detail/CVE-2021-21973CVE API docshttps://nvd.nist.gov/developers/vulnerabilitiesData feedshttps://nvd.nist.gov/vuln/data-feedsCataloghttps://www.cisa.gov/known-exploited-vulnerabilities-catalogData repositoryhttps://github.com/cisagov/kev-dataaf854a3a-2127-422b-91ae-364da2661108https://www.vmware.com/security/advisories/VMSA-2021-0002.html134c704f-9b21-4f2e-91b3-4a467353bcc0https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21973