CVE-2021-21980: vulnerability in VMware vCenter Server and VMware Cloud…
Published · Updated
45Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 4.7%
from disclosure to weapon1464 days
Published on NVDNov 24
1st PoC+1464d
VulnCheck+188d
exploitation probability
4.7%top 8% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
Affected products
n/a · VMware vCenter Server and VMware Cloud Foundationpublic PoCs found — 2
vulncheckvulncheck.com/xdb/f882b2ef624funverifiedvulncheckvulncheck.com/xdb/328d29b0f2c0unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.