5.3
Medium
CVE-2021-21973 VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-20, CWE-918
Description
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware vCenter Server | Versions not published | |
| VMware Cloud Foundation | Versions not published |
Other CVEs of VMware vCenter Server
The 14 CVEs of VMware vCenter Server →
CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability
7.5
High
CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
9.8
Critical
CVE-2024-37081
The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An…
7.8
High
CVE-2024-37080
vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol
9.8
Critical