PT-2021-2519 · Vmware · Vrealize Operations

Egor Dimitrenko · Published 2021-03-30 · Updated 2025-03-12 · CVE-2021-21975

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions vRealize Operations versions prior to 8.4

Description The issue is related to insufficient server-side request validation in the vRealize Operations API, which can be exploited by a remote attacker to gain unauthorized access to sensitive information. This can lead to a Server Side Request Forgery (SSRF) attack, potentially allowing the theft of administrative credentials.

Recommendations For versions prior to 8.4, update to version 8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vRealize Operations Manager API to minimize the risk of exploitation.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2021-01922

CVE-2021-21975

Affected Products

Vrealize Operations

References · 25

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vrops_mgr_ssrf_rce.rb · Exploit
• 🔥 https://github.com/rabidwh0re/REALITY_SMASHER · Exploit
• 🔥 https://github.com/GuayoyoCyber/CVE-2021-21975 · Exploit
• 🔥 https://github.com/TheTh1nk3r/exp_hub · Exploit
• 🔥 https://github.com/Henry4E36/VMWare-vRealize-SSRF · Exploit
• 🔥 https://github.com/Al1ex/CVE-2021-21975 · Exploit
• 🔥 https://github.com/murataydemir/CVE-2021-21975 · Exploit
• 🔥 https://github.com/Vulnmachines/VMWare-CVE-2021-21975 · Exploit
• 🔥 https://github.com/dorkerdevil/CVE-2021-21975 · Exploit
• 🔥 http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html · Exploit
• 🔥 https://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html · Exploit
• https://vmware.com/security/advisories/VMSA-2021-0004.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21975 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01922 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-21975 · Security Note