PT-2021-2130 · Vmware · Vmware Vcenter Server+3

Mikhail Klyuchnikov · Published 2021-02-23 · Updated 2025-03-28 · CVE-2021-21973

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions 7.x before 7.0 U1c VMware vCenter Server versions 6.7 before 6.7 U3l VMware vCenter Server versions 6.5 before 6.5 U3n VMware Cloud Foundation versions 4.x before 4.2 VMware Cloud Foundation versions 3.x before 3.10.1.2

Description The vSphere Client contains a Server Side Request Forgery (SSRF) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to the vCenter Server plugin, leading to information disclosure.

Recommendations For VMware vCenter Server versions 7.x before 7.0 U1c, update to version 7.0 U1c or later. For VMware vCenter Server versions 6.7 before 6.7 U3l, update to version 6.7 U3l or later. For VMware vCenter Server versions 6.5 before 6.5 U3n, update to version 6.5 U3n or later. For VMware Cloud Foundation versions 4.x before 4.2, update to version 4.2 or later. For VMware Cloud Foundation versions 3.x before 3.10.1.2, update to version 3.10.1.2 or later. As a temporary workaround, consider restricting access to the vCenter Server plugin to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2021-00989

CVE-2021-21973

Affected Products

Vmware Vcenter

Vmware Cloud Foundation

Vmware Vcenter Server

Vsphere Client

References · 17

• 🔥 https://github.com/freakanonymous/CVE-2021-21973-Automateme · Exploit
• https://vmware.com/security/advisories/VMSA-2021-0002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21973 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00989 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-21973 · Security Note
• https://securitylab.ru/news/516891.php · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://twitter.com/kkingsec/status/1707007060997812385 · Twitter Post
• https://t.me/sysadm_in_channel/2796 · Telegram Post
• https://t.me/cibsecurity/24092 · Telegram Post
• https://t.me/cybersecuritytechnologies/2807 · Telegram Post
• https://t.me/true_secator/6843 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021022401 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21973 · Note
• https://t.me/cybersecuritytechnologies/2791 · Telegram Post