Vulnerability in VMware Cloud Foundation
CVE-2021-21980
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Vmware Cloud_foundation — versions 3.0
- Vmware Vcenter_server — versions 6.5, 6.7
- N/a Vmware Vcenter Server And Cloud Foundation — versions VMware vCenter Server (6.7 before 6.7 U3p and 6.5 before 6.5 U3r) and VMware Cloud Foundation 3.x
Public proof-of-concept exploits
- Osyanina/westone-CVE-2021-21980-scanner
- pratikjojode/vcenter-cve-2021-21980-lab
- gui2000guix-ui/cve-2021-21980-mock-server
- gui2000guix-ui/cve-2021-21980-nuclei-poc
- pkxk5pr6m2-web/cve-2021-21980-nuclei-poc
- Osyanina/westone-CVE-2022-1388-scanner
- k0mi-tg/CVE-POC
- manas3c/CVE-POC
- nomi-sec/PoC-in-GitHub
- soosmile/POC
References
- security@vmware.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-21980?
- CVE-2021-21980 is a high-severity vulnerability in VMware Cloud Foundation. CVSS score: 7.5/10. Published 2021-11-24.
- How severe is CVE-2021-21980?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-21980 known to be exploited?
- 17 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.