Vulnerabilityhigh

VMware addresses SSRF flaw in vRealize Operations that allows stealing admin credentials

Security Affairsby @securityaffairsMar 30, 2021 · 19:59 UTC (Mar 30, 2021)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-21975 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-21975 CVE-2021-21983

Tags: cve-2021-21975 cve-2021-21983 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21975	SSRF in VMware vRealize Operations Manager API Enables Admin Credential Theft	7.5	78%	KEVRansomwarePoC	Mar 31, 2021 KEV Jan 18, 2022
CVE-2021-21983	Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network…	6.5	69%	PoC	Mar 31, 2021

From the original article

1 min read at securityaffairs.com

VMware addressed a high severity vulnerability in vRealize Operations that could allow stealing admin credentials from vulnerable servers. VMware has published security updates to address multiple vulnerabilities in VMware vRealize Operations that could allow threat actors to steal admin credentials from vulnerable installs.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.