Lucene search

K
nessusThis script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.VMWARE_VCENTER_CVE-2021-21973.NBIN
HistoryAug 23, 2022 - 12:00 a.m.

VMware vCenter Server SSRF (CVE-2021-21973) (Direct Check)

2022-08-2300:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
26

A server-side request forgery vulnerability exists in the VMware vCenter vSphere HTML5 client due to improper validation of URLs in a vCenter Server plugin. An unauthenticated, remote attacker can exploit this, via HTTPS, leading to information disclosure.

Binary data vmware_vcenter_cve-2021-21973.nbin
VendorProductVersionCPE
vmwarevcenter_servercpe:/a:vmware:vcenter_server