PT-2021-2518 · Vmware · Vrealize Operations

Egor Dimitrenko · Published 2021-03-30 · Updated 2022-02-01 · CVE-2021-21983

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vRealize Operations versions prior to 8.4

Description The issue is related to an uncontrolled upload of dangerous file types in the vRealize Operations API interface. This could allow a remote attacker to upload malicious files. An authenticated malicious actor with network access to the vRealize Operations Manager API may be able to write files to arbitrary locations on the underlying photon operating system.

Recommendations For versions prior to 8.4, update to version 8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vRealize Operations Manager API to minimize the risk of exploitation. Avoid using the API for file uploads until the issue is resolved.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2021-01919

CVE-2021-21983

Affected Products

Vrealize Operations

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vrops_mgr_ssrf_rce.rb · Exploit
• 🔥 https://github.com/murataydemir/CVE-2021-21983 · Exploit
• 🔥 http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-21983 · Security Note
• https://bdu.fstec.ru/vul/2021-01919 · Security Note
• https://vmware.com/security/advisories/VMSA-2021-0004.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21983 · Vendor Advisory
• https://t.me/cvenotify/12667 · Telegram Post
• https://t.me/cvenotify/12412 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021033102 · Note
• https://t.me/ptswarm/18 · Telegram Post
• https://t.me/cybersecuritytechnologies/3057 · Telegram Post