PT-2021-2362 · Vmware · Vmware View Planner

Mikhail Klyuchnikov · Published 2021-03-02 · Updated 2023-08-08 · CVE-2021-21978

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware View Planner versions prior to 4.6 Security Patch 1

Description The issue is related to the lack of authorization and improper input validation in the logupload web application of VMware View Planner, allowing an unauthorized attacker with network access to upload and execute a specially crafted file, leading to remote code execution within the logupload container. This can be exploited by an attacker to execute arbitrary code.

Recommendations For versions prior to 4.6 Security Patch 1, apply the 4.6 Security Patch 1 to resolve the issue. As a temporary workaround, consider restricting access to the logupload web application to minimize the risk of exploitation. Avoid using the logupload feature until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Missing Authorization

RCE

Weakness Enumeration

CWE-434

CWE-862

CWE-20

Related Identifiers

BDU:2021-01600

CVE-2021-21978

Affected Products

Vmware View Planner

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_view_planner_4_6_uploadlog_rce.rb · Exploit
• 🔥 https://github.com/GreyOrder/CVE-2021-21978 · Exploit
• 🔥 https://github.com/skytina/CVE-2021-21978 · Exploit
• 🔥 https://github.com/me1ons/CVE-2021-21978 · Exploit
• 🔥 http://packetstormsecurity.com/files/161879/VMware-View-Planner-4.6-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-21978 · Security Note
• https://bdu.fstec.ru/vul/2021-01600 · Security Note
• https://vmware.com/security/advisories/VMSA-2021-0003.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21978 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/2911 · Telegram Post
• https://t.me/cibsecurity/24409 · Telegram Post
• https://t.me/cvenotify/10817 · Telegram Post
• https://t.me/rnetsec/14519 · Telegram Post
• https://t.me/secharvester/10699 · Telegram Post
• https://cxsecurity.com/cveshow/CVE-2021-21978 · Note